December 2000 - zorp - lists.balabit.hu

zorp 0.7.9 released
by Balazs Scheidler 28 Dec '00

28 Dec '00

Hi, We have released zorp-0.7.9, here's the NEWS entry: zorp 0.7.9 * new protocol proxy: finger * new option: --version, displays version and compilation info (try: zorpctl version) * POSIX 1003.1e capabilities support, Zorp drops all capabilities, and enables them only when needed. (for now only CAP_NET_BIND_SERVICE (for binding low numbered ports) and CAP_NET_ADMIN (for transparent proxying) is used) * HTTP: implemented CONNECT method, needed to use HTTP in nontransparent mode with https urls. * proxies written in python actually work, an example: doc/examples/python_proxy.py was added which implements a finger proxy (alternative to the one implemented in Zorp) * new flexible Zone class, backported from the 0.9 branch. Changes policy interface. * updated documentation and examples to reflect changes in policy interface * moving towards the new logging mechanism (look at --log-spec and --log-tags in zorp(8)) * and as always: bugfixes Debian package building is currently broken at the moment. It'll be fixed in the next release. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

zorp 0.7.8 released
by Balazs Scheidler 21 Dec '00

21 Dec '00

Hi, zorp version 0.7.8 released with the following changes: zorp 0.7.8 Thu, 21 Dec 2000 17:18:56 +0100 User visible changes: * Services need not be stored in a Python variable any more, Listeners refer to Services by their name. * FTP fixes, ftp data address autodetection * HTTP implements the '*' header and method in policy hashes * PSSL cleanups, it's possible to set client/server side certificate/key files independently, added timeout possibility * Plug cleanups, removed unused code, added timeout possibility * Improved docstring documentation, a generated version of the python docstring documentation is available at doc/reference.html.tar.gz, it's generated using a custom version of pythondoc. Fixes to pythondoc will be sent to its author. * default init() function provided by Zorp * new doc/examples directory to contain some examples * bugfixes -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Re: [zorp] Plug proxy es dokumentaciok
by endre.wagner＠dataware.debis.hu 20 Dec '00

20 Dec '00

I think you miss "TransparentChainer(None,1)" . Meaning: "None": use firewall interface address "1" : is a boolean, and means forge address. So, You use a private netaddress so I think this address not routed at the destination net. Best Regards: Endre Wagner 0.7.7-es zorp van fent es nem igazan akar mukodni a kov. policy: # Zorp config file ###################################################################### from Zorp.Zorp import * from Zorp import Zorp from Zorp.Zone import InetZone from Zorp.Service import Service from Zorp.SockAddr import SockAddrInet from Zorp.Chainer import TransparentChainer, DirectedChainer, InbandChainer from Zorp.Plug import PlugProxy from Zorp import Http from Zorp.Http import HttpProxy from Zorp.Ftp import FtpProxyAllow from Zorp.Listener import Listener Zorp.firewall_name = 'zorp@firewall' Zorp.zones= [ InetZone("intranet","192.168.2.0","255.255.255.0",None, outbound_services=["plug_trans"], inbound_services=[]), InetZone("internet","0.0.0.0","0.0.0.0",None, outbound_services=[], inbound_services=["plug_trans"]), ] class MyPlug(PlugProxy): def config(self): pass def init(name): trans_plug = Service("plug_trans",TransparentChainer(),MyPlug) Listener(SockAddrInet("192.168.2.1",2525),trans_plug) ############################## Csatlakozni tudok a tavoli mail szerverhez de visszafele nem jon semmi. A forraskodon kivul van mar valami mas doksi is? Mag irt valamit egy 180 oldalas doksirol. elerheto az valahol? Andars -------------------------------------------------------------------------- "A Linux nem mas, mint szellemes megoldasok tomeny es dinamikus halmaza, amely a kivancsi embert folyamatosan ellatja kiprobalni valo csemegevel." --------={ United Nazbuls homepage: http://lino.kvif.hu/~farago }=-------- _______________________________________________ zorp mailing list zorp(a)lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/zorp

3 6

Zorp Documentation
by endre.wagner＠dataware.debis.hu 19 Dec '00

19 Dec '00

Hi! I haven't StarOffice, so please, convert the the existing dokumentation into HTML and pdf format. Best Regards: Endre Wagner

2 1

Re:[zorp] Plug proxy es dokumentaciok
by Deleersnyder, Sebastien 19 Dec '00

19 Dec '00

Hi, please use English? I doubt that any of you speak Dutch, so I wont. regards, Sebastien

1 0

Plug proxy es dokumentaciok
by farago＠ns.edu.kvif.hu 19 Dec '00

19 Dec '00

0.7.7-es zorp van fent es nem igazan akar mukodni a kov. policy: # Zorp config file ###################################################################### from Zorp.Zorp import * from Zorp import Zorp from Zorp.Zone import InetZone from Zorp.Service import Service from Zorp.SockAddr import SockAddrInet from Zorp.Chainer import TransparentChainer, DirectedChainer, InbandChainer from Zorp.Plug import PlugProxy from Zorp import Http from Zorp.Http import HttpProxy from Zorp.Ftp import FtpProxyAllow from Zorp.Listener import Listener Zorp.firewall_name = 'zorp@firewall' Zorp.zones= [ InetZone("intranet","192.168.2.0","255.255.255.0",None, outbound_services=["plug_trans"], inbound_services=[]), InetZone("internet","0.0.0.0","0.0.0.0",None, outbound_services=[], inbound_services=["plug_trans"]), ] class MyPlug(PlugProxy): def config(self): pass def init(name): trans_plug = Service("plug_trans",TransparentChainer(),MyPlug) Listener(SockAddrInet("192.168.2.1",2525),trans_plug) ############################## Csatlakozni tudok a tavoli mail szerverhez de visszafele nem jon semmi. A forraskodon kivul van mar valami mas doksi is? Mag irt valamit egy 180 oldalas doksirol. elerheto az valahol? Andars -------------------------------------------------------------------------- "A Linux nem mas, mint szellemes megoldasok tomeny es dinamikus halmaza, amely a kivancsi embert folyamatosan ellatja kiprobalni valo csemegevel." --------={ United Nazbuls homepage: http://lino.kvif.hu/~farago }=--------

1 0

Session limit
by endre.wagner＠dataware.debis.hu 19 Dec '00

19 Dec '00

Hi! I use zorp 0.6 and I need to limit the number of concurrent access to a network resource. How can I configure it with a plug or a http proxy. Best Regards: Endre Wagner

2 1

zorp 0.7.7 released
by Balazs Scheidler 15 Dec '00

15 Dec '00

As we promised earlier, we released the first member of the unstable branch we were working the last couple of weeks. Here's the NEWS entry: zorp 0.7.7 Fri, 15 Dec 2000 18:26:31 +0100 The first release in the 0.7.x branch. New features: * cleaned up (rewritten) FTP and HTTP proxies with new, simpler policy interface (pylib/Zorp/Http.py and pylib/Zorp/Ftp.py) * new log subsystem * english documentation (pylib/Zorp/*.py, doc/sgml/tutorial.sgml) * cleanups, bugfixes This release should be quite stable, at least it works for us. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Re: [zorp] Which Linux?
by endre.wagner＠dataware.debis.hu 15 Dec '00

15 Dec '00

Hi! I'm using it on a Debian Potato, and the kernel version is 2.2.17. version. The packet filtering is ipchains. It is working perfectly. Best Regards: Endre Wagner

2 1

Which Linux?
by Deleersnyder, Sebastien 15 Dec '00

15 Dec '00

Hi, Is there a preferred linux version to run zorp on? regards Sebastien

2 1