January 2004 - zorp - lists.balabit.hu

auth in gpl version
by Neal Hamilton 19 Feb '04

19 Feb '04

Does the gpl version of zorp offer any authenication? I want to auth against my openldap server. Thanks

2 1

z_stream_new
by pascal＠symsol.com.au 22 Jan '04

22 Jan '04

Hi guys, I thought I give your software a try and started compiling it. The configuration was running okay.. but when I do a make I get following error: make[3]: Entering directory `/tmp/zorp-2.0.7/lib' /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/tmp/zorp-2.0.7/lib -I/tmp/zorp-2.0.7 -I/usr/include/python2.1 -I/usr/include/python2.1/ExtensionClass/ -pthread -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -pthread -D_GNU_SOURCE -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -I/usr/local/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/tmp/zorp-2.0.7/lib -I/tmp/zorp-2.0.7 -I/usr/include/python2.1 -I/usr/include/python2.1/ExtensionClass/ -pthread -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -pthread -D_GNU_SOURCE -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -I/usr/local/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c -fPIC -DPIC -o proxy.lo proxy.c: In function `z_proxy_stack_proxy': proxy.c:515: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:515: error: too few arguments to function `z_stream_new' proxy.c:519: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:519: error: too few arguments to function `z_stream_new' proxy.c: In function `z_stacked_proxy_new': proxy.c:634: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:634: error: too few arguments to function `z_stream_new' proxy.c:637: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:637: error: too few arguments to function `z_stream_new' make[3]: *** [proxy.lo] Error 1 I checked then the library file libzorpll-2.1.1.10.0+20040106+2213/src/stream.c and the declaration of the z_stream_new function requires 4 arguments. -->z_stream_new(ZClass *class, gchar *name, ZStream *child, gint umbrella_flags) <-- But in the zorp-2.0.7/lib/proxy.c file there are only 2 parameters. -->tmpstream = z_stream_new(uppair[1], "");<-- So my guess is that I use the wrong libzorg library but thats just a guess? I hope you can help me out with this one. I am using on Suse9.0, python2.3 / 2.1, zorp-2.0.7, libzorpll-2.1.1.10.0+20040106+2213.. Thanks, pascal

1 1

iptables-utils documentation, download
by Michael D. (Mick) Bauer 09 Jan '04

09 Jan '04

Is there documentation anywhere for iptables.conf.in? There's no man-page or anything else I can find in Zorp GPL. Also, how does the average Zorp GPL user obtain iptables-utils? I got my deb-package from a Zorp Pro CD, but I've noticed that the Zorp GPL literature (Zorp Tutorial, etc.) refers to it too. Thanks, Mick Bauer /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 1

(no subject)
by "Петр Дущенко" 09 Jan '04

09 Jan '04

Hello I am understand that the Zorp Proxy Firewall suit is realy that I need. It`s greatful that this proxy has good flexibility in acces control. But I have problem with Zorp Proxy installing: i don`t have the Python Extclass 1.2. Please prompt me - where I can download the Python Extclass 1.2. With best regard, Peter Dushchenko Russia, Sakhalin island.

2 1

Re: [zorp] web layout test
by Shane Handley 09 Jan '04

09 Jan '04

ah, forgot something: attatched: zorp_webTest01.zip > Hi, > > I have a web layout ready for testing (attathched:zorp_webTest.zip) > > I couldn't get CASM to run on my server, so you will have to test it live, all files > are included. Let me know how it goes and I will try to fix anything else. > > good onyas. > > shane(a)lukeman.com.au > _______________________________________________ > zorp mailing list > zorp(a)lists.balabit.hu > http://lists.balabit.hu/mailman/listinfo/zorp

3 2

HTTPS proxy-stacking example
by Michael D. (Mick) Bauer 09 Jan '04

09 Jan '04

Hi, all. I've been looking in vain for sample policy.py code for proxy stacking. Can someone please show me what this should look like for a general-HTTPS-browsing scenario, e.g., intranet users need to reach various ecommerce sites on the Internet? I've seen code for doing this with PlugProxy, but I'd much rather do it with PsslProxy and HttpProxy (i.e., with some intelligence ;-). (I hope I'm not assuming too much in thinking this isn't an X.509 nightmare...) Thanks, Mick P.S. I've made an incredible amount of progress this morning thanks to this List. You guys rock! /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 3

website
by Shane Handley 08 Jan '04

08 Jan '04

with the website: You may need to edit the line: <BODY style="margin-left:0px;margin-top:0px;"> to: <BODY style="margin-left:0px;margin-top:0px;margin-right:0px;margin- bottom:0px;"> To remove the redundant space at the right, and bottom edges of each page.

1 0

Dummy interface woes (Zorp GPL)
by Michael D. (Mick) Bauer 08 Jan '04

08 Jan '04

O.K., I've worked through my "silent death" zorpctl problem -- thanks Szalay! The problem there was that the versions of libzorpll and in http://www.balabit.com/downloads/zorp/2.1/deb/ are mismatched (zorp was looking for an older library-file). I uninstalled my debs, and installed the ones in /zorp/2.0/deb. New problem: when I try to start Zorp, it still fails, but it writes the following (among other things) to /var/log/messages: logging "Binding to dummy interface failed, please create one and pass --autobind-ip parameter; autobind=''192.168.1.1'' " This is what instances.conf looks like: blue -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' purple -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' red -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' Question: does dummy0 need to be set up in /etc/networking/interfaces? Or is something else wrong here? Thanks, Mick /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 2

web layout test
by Shane Handley 08 Jan '04

08 Jan '04

Hi, I have a web layout ready for testing (attathched:zorp_webTest.zip) I couldn't get CASM to run on my server, so you will have to test it live, all files are included. Let me know how it goes and I will try to fix anything else. good onyas. shane(a)lukeman.com.au

2 1

Zorpctl error
by Michael D. (Mick) Bauer 08 Jan '04

08 Jan '04

When I try to start zorp, it immediately quits silently, logging the following 3 times to /var/log/messages: zorpctl: Zorp exited gracefully, exitcode=127 Setting -verbose=5 in instances.conf doesn't yield one iota more worth of info; any ideas? Thanks, Mick /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 1