- zorp - lists.balabit.hu

RE: [zorp] Zorp Installation Problems.
by Mark Nadir 26 Jan '05

26 Jan '05

HI Bazsi Thanks again :) I did what you suggest, now I get a whole new error on Make /usr/bin/ld: cannot find -lpython2.2 collect2: ld returned 1 exit status make[3]: *** [libzorp.la] Error 1 make[3]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9/lib' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9' make: *** [all-recursive-am] Error 2 lpython2.2??? Mark -----Original Message----- From: zorp-admin(a)lists.balabit.hu [mailto:zorp-admin@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: January 25, 2005 3:43 PM To: zorp(a)lists.balabit.hu Subject: RE: [zorp] Zorp Installation Problems. On Tue, 2005-01-25 at 11:23 -0600, Mark Nadir wrote: > Thanks for the quick response Bazsi > > I sure can. So my configuration line was simply > > ./configure --with-python-libs --with-tproxy=netfilter Please try to omit --with-python-libs, or specify location for your python libraries. ./configure --with-python-libs=/usr/lib/python2.2/config --with-tproxy=netfilter -- Bazsi _______________________________________________ zorp mailing list zorp(a)lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/zorp

4 3

RE: [zorp] Zorp Installation Problems.
by Mark Nadir 25 Jan '05

25 Jan '05

Thanks for the quick response Bazsi I sure can. So my configuration line was simply ./configure --with-python-libs --with-tproxy=netfilter -----Original Message----- From: zorp-admin(a)lists.balabit.hu [mailto:zorp-admin@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: January 25, 2005 12:25 PM To: zorp(a)lists.balabit.hu Subject: Re: [zorp] Zorp Installation Problems. On Tue, 2005-01-25 at 09:08 -0600, Mark Nadir wrote: > Hi All, > > > > I am trying to install Zorp 2.0.9-6 on a Trustix 2.2, which is a > secured Redhat-based distro. > > > > After many hours of getting Python 2.2 with Extensions 2.2 working, I > am now trying to install Zorp, and on the "Make" portion of the > installation, I bump into a nice error of - (I will only include from > the part that actually gives the error) > The configure script specified -Lyes to the linker, which means to use a directory named "yes" for searching libraries. Probably you either used wrong LDFLAGS options, or gave a "yes" argument to one of the configure options which in turn expected a path. Can you post your configure invocation? -- Bazsi _______________________________________________ zorp mailing list zorp(a)lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/zorp

2 1

Zorp Installation Problems.
by Mark Nadir 25 Jan '05

25 Jan '05

Hi All, I am trying to install Zorp 2.0.9-6 on a Trustix 2.2, which is a secured Redhat-based distro. After many hours of getting Python 2.2 with Extensions 2.2 working, I am now trying to install Zorp, and on the "Make" portion of the installation, I bump into a nice error of - (I will only include from the part that actually gives the error) /bin/sh ../libtool --mode=link gcc -O2 -Wall -W -g -D_GNU_SOURCE -Lyes -o libz orp.la -rpath /usr/local/lib -version-info `echo 2.0.9 |awk -F. '{printf("%u:%u: 0",$1,$2*10+$3);}'` -export-dynamic proxy.lo modules.lo pycore.lo pysockad dr.lo pypolicy.lo pyproxy.lo pystream.lo proxyvars.lo zorp.lo authprovider.lo di mhash.lo nullcode.lo base64.lo packsock.lo packet.lo packstream.lo sysdep.lo tps ocket.lo pyszig.lo szig.lo pydispatch.lo dispatch.lo conntrack.lo fastpath.lo py fastpath.lo attach.lo connection.lo pyattach.lo plugsession.lo zpython.lo -pthr ead -L/usr/local/lib -lzorpll -lgthread-2.0 -lglib-2.0 -L/usr/lib/python2.2/co nfig -lpython2.2 -lutil -ldl -lpthread -lssl -lcrypto -lm -lnsl -pthread -Wl,-- export-dynamic -lgthread-2.0 -lgmodule-2.0 -ldl -lglib-2.0 ../libtool: line 1: cd: yes: No such file or directory libtool: link: cannot determine absolute directory name of `yes' make[3]: *** [libzorp.la] Error 1 make[3]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9/lib' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/preinstall/zorp-2.0.9-6/zorp-2.0.9' make: *** [all-recursive-am] Error 2 I think that there may be something missing, but I am not sure if it is Python-related or something completely unrelated. Any assistance is appreciated. Looking forward to your response. Mark.

2 1

2.1 to 3.0
by Phil Moors 11 Jan '05

11 Jan '05

I noticed my apt-get update on 2.1 failed. Should I dist-upgrade to 3.0? Are there any gotcha's in doing this? Thanks, Phil

2 1

What happened to iptables-1.20?
by Sheldon Hearn 11 Jan '05

11 Jan '05

Hi folks, Anyone know where iptables-1.20 went? It's no longer available at: http://www.balabit.com/downloads/zorp/zorp-os/pool/i/iptables-utils/ The most recent version there is iptables-utils_1.18. Ciao, Sheldon.

4 4

Vi-agr-a! New lower price! qvvfl
by Steve 31 Dec '04

31 Dec '04

1 0

Urgent Help required on Zorp - TPRoxy - Transparent Proxy
by TEJAS VORA 19 Nov '04

19 Nov '04

Hello, We as a company are developing a product which is a gateway product and seats between client and servers. As a product requirement - we are running bridge mode on this machine. The other requirements are 1. Providing transparent proxy support for FTP, HTTP, HTTPS, TELNET, SSH, POP3, NNTP, SMTP protocols. 2. The Gateay machine (proxy runnin gon gateway machine) should not change the Source IP address - as Servers are doing IP authentication 3. Caching for FTP and HTTP. As a part of this development - I am currently Testing TProxy and Zorp for our product. But I am not able to set it up. As a part of this I have couple of questions. Hope you will answer them asap. 1. If I use Zop/TProxy - do I need to use squid/jftpgw/frox for providing transparent proxy support or zorp can do that? 2. Is Zorp pro available as a software or OS - becuase we would like to have redhat linux 7.3 as OS on gateway machine. 3. How to implement Zorp/Tproxy - so that I can configure it for transparent proxy - such that it does not change source ip address? 4. In future - if we want to support any new protocols - can we do that? 5. Basic and main thing is - how to setup zorp and tproxy so that it provides transparent proxy for ftp,http and other protocols and it does not change Source IP address? 5. Can I have caching support woth zorp? 5. We are very much interested in buying Zorp if we test it with all our requirements fulfiiled. What would be the better person to talk with for purchasing? I hope you will answer my questions asap - so I can test zorp asap and our company can make a decision for buying zorp. Thank You, Yours Sincerely, Tejas Vora IST Center, CA, USA

1 0

ANNOUNCE: zorp-unoff upgrade: new whitepaper, iptables-utils, zorp, and FAQs
by Magosányi Árpád (mag) 02 Nov '04

02 Nov '04

Hi! [A magyar szöveg a végén] The zorp-unoff site has been upgraded. -There is a whitepaper about information flow control policy and firewalls in http://zorp-unoff.sourceforge.net/whitepapers/. Look for macpolicy.en.txt -The first zorp-unoff release of iptables-utils -manual page (someone asked for it:) -iptables-test has been anhanced a lot -installation method suitable for a general-purpose machine (forgotten about ZMS) -other fixes and enhancements (only one -harmless- lintian warning) -zorp 2.0.9-6 iptables-utils and the new zorp will be in Debian, but do not hold your breath because my debian gpg key has expired, and fixing that may take some time (last time it took some 3-4 months) -------------------------------- A zorp-unoff weboldal megújult. -Felkerült egy whitepaper az információáramlás kontrolljáról és a tűzfalakról a http://zorp-unoff.sourceforge.net/whitepapers/ alá. Keresd a macpolicy.hu.txt -t. -Az iptables-utils első zorp-unoff változata -man oldal (valaki kérte:) -az iptables-test sokat csiszolódott -a telepítés egy általános célú gépnek is megfelelő (elfelejtettük a ZMS-t ;) -más javítások és szépítések (csak egy -ártalmatlan- lintian figyelmeztetés van) -zorp 2.0.9-6 Az iptables-utils és az új zorp be fog kerülni a Debianba, de ne tartsd vissza a lélegzeted mert a debian gpg kulcsom lejárt, és ezt idő megoldani (legutóbb 3-4 hónapba került)

1 0

Virtual IP PlugProxy
by Phil Moors 28 Oct '04

28 Oct '04

What is the right way to use a virtual ip address (alias) bound to an outside interface and forward traffic to a host in the private network? I can get the Plug to work with the eth3 address, but not with the eth3:1 address. I tried setting up an InetZone with the ip address bound to eth3:1, but the packets disappear after hitting the tproxy rule in the INPUT chain. I can see them move through PREROUTING and then to the PRxxx chain, but they never get back to INPUT. Or, am I going about this the wrong way? Thanks, Phil

2 1

Patch for iptables-gen (iptables-utils)
by Sheldon Hearn 27 Oct '04

27 Oct '04

The iptables-utils package is a fantastic piece of software. It allows me to manage remote firewalls with confidence. Recently, I had to set up a firewall for an ADSL-connected site, where they use the MASQUERADE target. They also want a few ports forwarded to specific hosts on the internal network. I want my ppp linkup script (/etc/ppp/ip-up in Gentoo Linux) to generate iptables.conf.var, adding a line like this: #define MY_ADDR 196.31.31.10 Then I want iptables-gen to regenerate the ruleset, given rules like this in iptables.conf.in: -A PREROUTING -p tcp \ -d MY_ADDR --dport 2222 -j DNAT --to-destination 10.0.0.2:22 -A POSTROUTING -p tcp \ -s 10.0.0.2 --sport 22 -j SNAT --to-source MY_ADDR:2222 However, the current implementation of iptables-gen (in iptables-utils-1.20) only substitutes defined variables that are immediately followed by whitespace of end of line. It doesn't substitute defined variables that are immediately followed by a colon (:). Therefore, I propose the attached patch to iptables-gen.in, which includes the colon (:) as a legal delimiter for defined variables. Ciao, Sheldon.

2 1