December 2003 - zorp - lists.balabit.hu

(no subject)
by "Петр Дущенко" 09 Jan '04

09 Jan '04

Hello I am understand that the Zorp Proxy Firewall suit is realy that I need. It`s greatful that this proxy has good flexibility in acces control. But I have problem with Zorp Proxy installing: i don`t have the Python Extclass 1.2. Please prompt me - where I can download the Python Extclass 1.2. With best regard, Peter Dushchenko Russia, Sakhalin island.

2 1

Performance numbers for Zorp
by Elwin Eliazer 01 Jan '04

01 Jan '04

Hi, I am trying to use Zorp. Would like to get some more details about the performance of Zorp and connection setup rates. I see the web-proxy throughput mentioned in the file Zorp2.pdf. What i am looking for immediately are: - Number of TCP connections Zorp can handle per second in a Pentium-3 or similar type of desktop. - Similarly, Number of SSL connections per second Would appreciate your input on any performance related information on Zorp. Thanks in advance. Happy New Year to you all. cheers, Elwin. ===== __________________________________ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/

2 2

Difficulty in installing Zorp!
by Elwin Eliazer 01 Jan '04

01 Jan '04

Hi, I am trying to install Zorp in my Compaq desktop, running RedHat 9.0. Recently i upgraded the kernel to 2.4.22, from 2.4.20-6, to be able to use the TPROXY. I got most of the steps through. But i am stuck in getting the Python Ext class 1.2 installed, since there appears to be some compatibility issues, in the thread.h file. RedHat 9 comes with Python 2.2, whereas the Zorp INSTALL file suggests Python 1.5 or 2.1. Can i assume 2.2 is ok for Zorp? RedHat 9 does not come with PythonExtClass. So i downloaded the SRPM from rpmfind.net, for python-extclass-1.2_1. I am getting build problems around the ThreadLock.c and thread.h file. I also see a ThreadLock.c.orig file, and the difference between the two is the way in which thread.h is included, and some definitions. I tried copying the orig file back to .c and then also i continue to get compilation errors. Your suggestions and help will be appreciated. cheers, Elwin. ===== __________________________________ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/

2 1

zorp 2.0.8 0-day release
by Magosányi Árpád 11 Dec '03

11 Dec '03

Hi! [a magyar szöveg lejjebb] The Official Unofficial Zorp project is proud to announce zorp version 2.0.8-1 before the official announce of 2.0.8 upstream release. The upstream changes contain several enhancements on locking and logging, and support for session limits. The unofficial version contains those enhancements and fixes which did not yet get their way back to the official release. You can download the release from https://sourceforge.net/project/showfiles.php?group_id=93515&release_id=203… The project home page can be reached at http://zorp-unoff.sourceforge.net/ ------------------------------------------------------------------------------ A Hivatalos Nemhivatalos Zorp project bejelenti a zorp 2.0.8-1 verzióját a 2.0.8 upstream verzió hivatalos megjelenése előtt. Az upstream több fejlődést tartalmazn a lockolással és a naplózással kapcsolatosan, és támogatja a session limitet. A nemhivatalos verzió azokat a javításokat és előrelépéseket tartalmazza, amelyek nem kerültek még vissza a hivatalos kiadásba. A kiadás letölthető a https://sourceforge.net/project/showfiles.php?group_id=93515&release_id=203… címről. A project honlapja elérhető a http://zorp-unoff.sourceforge.net/ címen. -- GNU GPL: csak tiszta forrásból

1 0

filltable web pages and snapshot released
by Magosányi Árpád 10 Dec '03

10 Dec '03

Hi! [a magyar szöveg lejjebb] You can find the filltable pages at http://zorp-unoff.sourceforge.net/Filltable/index.html There is a security target (work in progress) and a daily snapshot released right now. The filltable utility is a python script to allow relatively untrusted (junior) GNU/Linux system adinistrators (for example system adinistrator of a chrooted sandbox) to modify specific parts of the linux netfilter configuration. The senior system administrator can designate specific packet classes (based on source/destination addresses, ports, etc) to be managed by the junior system administrator. These packet filter classes are directed to one or more netfilter chains. The junior system administrator can describe the configuration in a text file, which makes the input of the filltable utility. After that the senior system administrator can run the filltable utility on these files, thus modifying the configuration. The filltable script is strict on the syntax of its configuration script, thus makes compromising the execution domain of itself impossible. The filltable script is a Trusted Procedure in the sense of the Clark-Wilson access control modell. ------------------------------------------------- A filltable honlapjának helye: http://zorp-unoff.sourceforge.net/Filltable/index.html Van Biztonsági Rendszerterv (készülőben) és napi snapshot. Nincs kedvem lefordítani a bevezetőjét. -- GNU GPL: csak tiszta forrásból

1 0

Zorp-unoff: new site design
by Magosányi Árpád 10 Dec '03

10 Dec '03

Hi! [a magyar szöveg lejjebb] I still have no idea of the meaning of the word "aestethic", but could steal some tips from the design of the Gentoo site. Now we have news on the left bar. ---------------------------------------- Még mindig nem tudom mit jelenthet az a szó, hogy "esztétikus", de sikerült lopnom néhány ötletet a Gentoo weboldalról. A bal oldalon vannak hírek. -- GNU GPL: csak tiszta forrásból

1 0

AW: apt-source (was Re: [zorp] Zorp Pro 2.0, post-installation)
by Dominik Oestreicher 04 Dec '03

04 Dec '03

Hi, to install and configure Zorp is not an easy thing, so no question is to easy with this software ;-) I have added following line into my last installation: deb https://<user>:<password>@apt.balabit.hu/zorp-os/ 2.1 zorp-os zorp zorp-common zms zms-gui zms-gui-common zms-agent satyr zas Additionally I had to add Acquire::https::Peer-Verify-Level "0"; into the /apt/apt/apt.conf (or something like that) file because I received an error message about an untrusted certificate. At the moment I try to get the new virusbuster module running, but without success. One problem I ran into lately where a configuration mistake with a transparent proxy. Hint: Do not use the same port for "proxy port" and "rule port" when creating a transparent listener. It will not work and the error message will not really help ;-) Regards Dominik > -----Ursprüngliche Nachricht----- > Von: Michael D. (Mick) Bauer [mailto:darth.elmo@wiremonkeys.org] > Gesendet: Dienstag, 2. Dezember 2003 22:57 > An: zorp(a)lists.balabit.hu > Betreff: apt-source (was Re: [zorp] Zorp Pro 2.0, post-installation) > > > Hi, Major. > > Bazsi just gave me a username & password for the apt-source site. What > should my new sources.list entry look like? (Pardon the > newbie question, > but I don't use Debian often.) > > Thanks, > Mick > > > > On Tue, 2003-12-02 at 04:33, Michael D. (Mick) Bauer wrote: > >> By changing the OUTPUT default policy on my firewall to > ACCEPT, I was > >> able to connect from my ZMS client (actually I could've > achieved the > >> same thing by leaving it at DROP but by inserting an "accept > >> established" rule in the OUTPUT chain, right? And shouldn't that be > >> the default?). > > > > Yes, it should be the default. (also by default we don't use DROP > > rule on OUTPUT chain) > > > >> But immediately after successful authentication, I > received the error > >> "Request: missing or invalid type", and my ZMS client quit. > > > > It seems like you use zms-engine from the 2.0 series. Zms > client for > > windows is not available from the 2.0 series, but from the > 2.1. These > > are incompatible, so you have to upgrade your zms-engine to 2.1. The > > upgrade is available from the apt.balabit.hu apt-source, > but it require > > username/password. > > > > BTW: can you tell me the version of your installation CD? You can > > check it by booting from it, and pressing F9 on the > bootscreen, or mount > > it on a working machine and view the file > /cdrom/isolinux/version.scr. > > > > MCS > > > > > > > > _______________________________________________ > > zorp mailing list > > zorp(a)lists.balabit.hu > > http://lists.balabit.hu/mailman/listinfo/zorp > > > /-------------------------------------------------\ > | Michael D. (Mick) Bauer | > | Hired Goon Specializing in Information Security | > | Security Editor, Linux Journal | > | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | > \-------------------------------------------------/ > > > _______________________________________________ > zorp mailing list > zorp(a)lists.balabit.hu > http://lists.balabit.hu/mailman/listinfo/zorp >

2 1

RE: [zorp] unofficial zorp 2.0.7-2 is released
by Makay Kalman 04 Dec '03

04 Dec '03

THX Arpad and sorry. > Hi! > > Sorry for being hungarian. > > Here is the translation: > > > Sorry for the oftopic question. Is it good if the > development/fixes forked? > > It isn't a fork, this is why the unofficial zorp is official. ... .... > (well, it is not core to the extent that it isn't even zorp). >

1 0

RE: [zorp] unofficial zorp 2.0.7-2 is released
by Makay Kalman 03 Dec '03

03 Dec '03

Árpád, Offtopic buta kérdés, de mennyire jó az, ha kétirányba szakad a fejlesztés/javítás? Üdv., Makay Kálmán > > A Hivatalos Nemhivatalos Zorp project büszkén bejelenti a > zorp_2.0.7-2 verziót. > > Ez a verzió kikerül egy NPTL által behozott hibát, amit a > zorp ellen kritikusként jelentettek be. (Az NPTL nem szereti > ha a stack limit nem osztható 4-el.) > > Ha az új verziót feltelepíted, a puritánok kedvéért kapsz egy > üres instances.conf-ot is. > > > -- > GNU GPL: csak tiszta forrásból > _______________________________________________ > zorp mailing list > zorp(a)lists.balabit.hu > http://lists.balabit.hu/mailman/listinfo/zorp > >

3 3

URL for the announce
by Magosányi Árpád 03 Dec '03

03 Dec '03

Hi! You can download the new version from http://sourceforge.net/project/showfiles.php?group_id=93515&release_id=2014… And watch out for it apearing in Debian/testing. -- GNU GPL: csak tiszta forrásból

1 0