- zorp - lists.balabit.hu

tproxy source IP address question
by Gunjan 05 Apr '04

05 Apr '04

Hi, I was looking for a transparent proxy which does not change the source IP address when it tries to establish connection with the actual destination for the client. I tried squid, but it changes the source IP address to the proxy server IP address. I was going thru the tproxy patch readme file, and it says that it can establish connection with "foreign IP address" , does that mean that it does not change the source IP address even though it breaks the connection? Can someone confirm this? Thanks, Gunjan __________________________________ Do you Yahoo!? Yahoo! Small Business $15K Web Design Giveaway http://promotions.yahoo.com/design_giveaway/

2 1

Zorp-Unoff bughunting contest extended
by Magosányi Árpád 25 Feb '04

25 Feb '04

Hi! [A magyar szöveg lejjebb található.] The Zorp-Unoff bughunting contest has been extended. You can submit your bug, feature request, patch, etc. until 2004-03-15. BalaBit Inc. has kindly donated a t-shirt in addition to the mug for the best bughunter. You can see the mug at http://zorp-unoff.sourceforge.net/img/bogre.png . How to participate in the contest? It is most easy. You should file a bug report or a feature request at http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562 The topic of the request or report can be anything related to the zorp-unoff project: a question or difficulty you have reached dealing with any software you can find here, any unclear or inaccurate point in the documentation. Anything you have difficulty in dealing with the zorp-unoff project, Who wins? First and foremost, all of us will win, as this way you will help us to improve zorp and the zorp-unoff site. The mug will be given to the one who gathers the highest number of points. For a simple bug report or feature request you will get one point. If you include a patch, or a detailed description to deal with the problem, you will get another two points. This applies to the first report of any bugs or feature requests. Your first three non-initial reports are also regarded with one point. You can use this to file feature requests which might already have been reported, but you feel them to be important. If the initial request or report did not have a patch, and yours is the first to have it, the additional two points are yours. If you know that your bug report is non-initial, please refer to the initial one. Your report is valid if you issue it until midnight of 14th February, in whatever time zone the sourceforge bug tracker uses. I retain my right to score the reports according to my personal judgement. ------------------------------------------------------------------- A Zorp-unoff hibavadász versenyt meghosszabbítottuk. A hibákat, kívánságokat, foltokat 2004-03-15-ig lehet beküldeni. A BalaBit egy pólót is felajánlott a bögre mellé a legjobb hibavadász számára. A bögrét megtekintheted a http://zorp-unoff.sourceforge.net/img/bogre.png címen. Hogyan lehet részt venni a versenyben? Ez nagyon könnyű. Készíts egy hibajelentést vagy funkciókérést a http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562 címen. A kérés vagy jelentés tárgya bármi lehet ami a zorp-unoff projecthez kapcsolódik: egy kérdés vagy nehézség, ami bármely itt található szoftverrel kapcsolatban felmerült, bármely homályos vagy pontatlan dolog a dokumentációban. Bármi, amivel nehézséged támadt a zorp-unoff projecttel kapcsolatban. Ki nyer? A legfontosabb az, hogy mindannyian nyerünk, mert így segítesz nekünk a zorp és a zorp-unoff oldalak jobbá tételében. A bögre azé lesz, aki a legtöbb pontot gyűjti össze. Egy egyszerű hibajelentésért vagy kérésért egy pont jár. Ha egy foltot, vagy részletes megoldási módot is megadsz, további két pont jár. Ez minden hiba vagy kérés első példányáért jár. Az első három nem eredeti jelentés szintén kap egy pontot. Ezt felhasználhatod olyan kérések küldésére, amelyeket már más is beküldött, de fontosnak érzed azokat. Ha az eredeti kérés vagy jelentés nem tartalmazott foltot, és a tiéd az első, amelyikben van, a plusz két pont a tiéd. Ha tudod, hogy a jelentésed nem eredeti, kérlek hivatkozz az eredeti jelentésre. Azok a jelentések számítanak, amelyeket Február 14.-én éjfélig küldesz be, aszerint az időzóna szerint, amit a sourceforge BTS használ. Fenntartom a jogomat, hogy a jelentéseket a személyes véleményem szerint pontozzam. -- GNU GPL: csak tiszta forrásból

1 0

Difficulty in running Zorp
by Elwin Eliazer 21 Feb '04

21 Feb '04

Hi, I tried to setup Zorp around December last year, and related to that i asked a few questions. Then i had to focus on some other activities. I am restarting some of my Zorp efforts now. I have completed various steps in getting Zorp, tproxy, iptables, etc build, in my desktop PC running RedHat Linux 9, with 2.4.22 kernel. All the steps towards building and installation, went fine, after a few iterations of getting things fixed. Now, i tried starting Zorp, as follows, after editing the policy.py and instances.conf file appropriately. # zorpctl start inter Starting Zorp Firewall suite: inter # zorpctl start intra Starting Zorp Firewall suite: intra # zorpctl start dmz Starting Zorp Firewall suite: dmz After doing the above, however, Zorp did not get started. I am getting the following: # zorpctl status inter Instance inter: not running. # zorpctl status intra Instance intra: not running. # zorpctl status dmz Instance dmz: not running. Is there an easy way for me to figure out what went wrong in my setup? Your help will be appreciated. Thanks. cheers, Elwin. estelzer(a)ieee.org

2 1

Difficulty in running Zorp (resending)
by Elwin Eliazer 21 Feb '04

21 Feb '04

Not sure if my previous message reached the list. Pl. ignore if you read the same before. Hi, I tried to setup Zorp around December last year, and related to that i asked a few questions. Then i had to focus on some other activities. I am restarting some of my Zorp efforts now. I have completed various steps in getting Zorp, tproxy, iptables, etc build, in my desktop PC running RedHat Linux 9, with 2.4.22 kernel. All the steps towards building and installation, went fine, after a few iterations of getting things fixed. Now, i tried starting Zorp, as follows, after editing the policy.py and instances.conf file appropriately. # zorpctl start inter Starting Zorp Firewall suite: inter # zorpctl start intra Starting Zorp Firewall suite: intra # zorpctl start dmz Starting Zorp Firewall suite: dmz After doing the above, however, Zorp did not get started. I am getting the following: # zorpctl status inter Instance inter: not running. # zorpctl status intra Instance intra: not running. # zorpctl status dmz Instance dmz: not running. Is there an easy way for me to figure out what went wrong in my setup? Your help will be appreciated. Thanks. cheers, Elwin. estelzer(a)ieee.org ===== __________________________________ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/

1 0

zorp 2.0.8 es Invalid response
by Gabor E. Tusnady 20 Feb '04

20 Feb '04

Sziasztok, Mit rontok el, mi valtozott, milyen RFC-t olvassak. Eddig zorp 2.0.3 volt es mukodott, ha parancssorbol vagy programmal kapcsolodtam egy szerverhez: >telnet www.server.hu 80 Trying ip.cim... Connected to www.server.hu (ip.cim). Escape character is '^]'. >GET http://www.server.hu/index.html es akkor itt jott a server valasz. Most viszont a zorp valaszol: -------------------------------------- <html> <head> <title>Invalid response</title> </head> <body> The server you were trying to contact sent an invalid response Possible reasons: <ul> <li>The server violates the HTTP/1.1 protocol <li>There's an interoperability problem between the server and this gateway </ul> Possible solutions: <ul> <li>Contact your system administrator for assistance <li>Contact your Zorp support for assistance </ul> Additional information: Error establishing connection to www.server.hu <hr> Page generated by Zorp, version 2.0.8 on Fri Feb 20 10:47:49 CET 2004. </body> </html> ------------------------ Ugyanakkor a szerver logjaban ez van: az.en.ip.cimem - - [20/Feb/2004:10:47:10 +0100] "GET http://www.server.hu/index.html" 200 2815 "-" "-" Tehat a szerver valaszol, csak a zorp ezt a valaszt nem szereti. Termeszetesen bongeszovel a www.server.hu/index.html megnezheto, illetve a server helyere barmilyen szerver behelyettesitheto. Kerdesem, hogy mi valtozott a 2.0.3-hoz kepest, es termeszetesen, hogy most milyen parancsot adjak, hogy megkapjam a kivant oldalt parancsorbol is. Meg egy megjegyzes, ami az uhu-tuzfal listara is valo lenne. Az zorp 2.0.3.4 (ami az uhu-tuzfal 1.0-ban van) kozepes terhelesnel szinte megall. 20 feletti http kapcsolatnal egy-egy keresre tobb percig is kell varni. A kapcsolat letrejotte utan mar gyors minden. A zorp ezalatt alszik. A valaszokat elore is koszonom, tusi -- Gabor E. Tusnady, PhD | e-mail: tusi(a)enzim.hu Institute of Enzymology, BRC | www: http://www.enzim.hu/~tusi Hungarian Academy of Sciences | tel: (36-1) 279-3159 H-1113 Budapest Karolina ut 29 | fax: (36-1) 466-5465 *****************************************************************

3 2

auth in gpl version
by Neal Hamilton 19 Feb '04

19 Feb '04

Does the gpl version of zorp offer any authenication? I want to auth against my openldap server. Thanks

2 1

Valentine day bughunting Contest!
by Magosányi Árpád 01 Feb '04

01 Feb '04

Hi! [A magyar változat a végén] We are proud to announce the first zorp-unoff bug hunting contest. The trophy of the contest is a nice Zorp mug (what else?), which you can see at http://zorp-unoff.sourceforge.net/img/bogre.png . How to participate in the contest? It is most easy. You should file a bug report or a feature request at http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562 The topic of the request or report can be anything related to the zorp-unoff project: a question or difficulty you have reached dealing with any software you can find here, any unclear or inaccurate point in the documentation. Anything you have difficulty in dealing with the zorp-unoff project, Who wins? First and foremost, all of us will win, as this way you will help us to improve zorp and the zorp-unoff site. The mug will be given to the one who gathers the highest number of points. For a simple bug report or feature request you will get one point. If you include a patch, or a detailed description to deal with the problem, you will get another two points. This applies to the first report of any bugs or feature requests. Your first three non-initial reports are also regarded with one point. You can use this to file feature requests which might already have been reported, but you feel them to be important. If the initial request or report did not have a patch, and yours is the first to have it, the additional two points are yours. If you know that your bug report is non-initial, please refer to the initial one. Your report is valid if you issue it until midnight of 14th February, in whatever time zone the sourceforge bug tracker uses. I retain my right to score the reports according to my personal judgement. The mug was kindly donated by BalaBit Inc. ---------------------------------------------- Örömmel hirdetjük ki az első zorp-unoff hibavadász versenyt. A verseny fődíja egy Zorp bögre (mi más?), amelyet megtekinthetsz a http://zorp-unoff.sourceforge.net/img/bogre.png címen. Hogyan lehet részt venni a versenyben? Ez nagyon könnyű. Készíts egy hibajelentést vagy funkciókérést a http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562 címen. A kérés vagy jelentés tárgya bármi lehet ami a zorp-unoff projecthez kapcsolódik: egy kérdés vagy nehézség, ami bármely itt található szoftverrel kapcsolatban felmerült, bármely homályos vagy pontatlan dolog a dokumentációban. Bármi, amivel nehézséged támadt a zorp-unoff projecttel kapcsolatban. Ki nyer? A legfontosabb az, hogy mindannyian nyerünk, mert így segítesz nekünk a zorp és a zorp-unoff oldalak jobbá tételében. A bögre azé lesz, aki a legtöbb pontot gyűjti össze. Egy egyszerű hibajelentésért vagy kérésért egy pont jár. Ha egy foltot, vagy részletes megoldási módot is megadsz, további két pont jár. Ez minden hiba vagy kérés első példányáért jár. Az első három nem eredeti jelentés szintén kap egy pontot. Ezt felhasználhatod olyan kérések küldésére, amelyeket már más is beküldött, de fontosnak érzed azokat. Ha az eredeti kérés vagy jelentés nem tartalmazott foltot, és a tiéd az első, amelyikben van, a plusz két pont a tiéd. Ha tudod, hogy a jelentésed nem eredeti, kérlek hivatkozz az eredeti jelentésre. Azok a jelentések számítanak, amelyeket Február 14.-én éjfélig küldesz be, aszerint az időzóna szerint, amit a sourceforge BTS használ. Fenntartom a jogomat, hogy a jelentéseket a személyes véleményem szerint pontozzam. A bögrét a BalaBit bocsájtotta rendelkezésünkre. -- GNU GPL: csak tiszta forrásból

1 0

z_stream_new
by pascal＠symsol.com.au 22 Jan '04

22 Jan '04

Hi guys, I thought I give your software a try and started compiling it. The configuration was running okay.. but when I do a make I get following error: make[3]: Entering directory `/tmp/zorp-2.0.7/lib' /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/tmp/zorp-2.0.7/lib -I/tmp/zorp-2.0.7 -I/usr/include/python2.1 -I/usr/include/python2.1/ExtensionClass/ -pthread -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -pthread -D_GNU_SOURCE -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -I/usr/local/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/tmp/zorp-2.0.7/lib -I/tmp/zorp-2.0.7 -I/usr/include/python2.1 -I/usr/include/python2.1/ExtensionClass/ -pthread -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -pthread -D_GNU_SOURCE -I/opt/gnome/include/glib-2.0 -I/opt/gnome/lib/glib-2.0/include -I/usr/local/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c -fPIC -DPIC -o proxy.lo proxy.c: In function `z_proxy_stack_proxy': proxy.c:515: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:515: error: too few arguments to function `z_stream_new' proxy.c:519: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:519: error: too few arguments to function `z_stream_new' proxy.c: In function `z_stacked_proxy_new': proxy.c:634: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:634: error: too few arguments to function `z_stream_new' proxy.c:637: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:637: error: too few arguments to function `z_stream_new' make[3]: *** [proxy.lo] Error 1 I checked then the library file libzorpll-2.1.1.10.0+20040106+2213/src/stream.c and the declaration of the z_stream_new function requires 4 arguments. -->z_stream_new(ZClass *class, gchar *name, ZStream *child, gint umbrella_flags) <-- But in the zorp-2.0.7/lib/proxy.c file there are only 2 parameters. -->tmpstream = z_stream_new(uppair[1], "");<-- So my guess is that I use the wrong libzorg library but thats just a guess? I hope you can help me out with this one. I am using on Suse9.0, python2.3 / 2.1, zorp-2.0.7, libzorpll-2.1.1.10.0+20040106+2213.. Thanks, pascal

1 1

iptables-utils documentation, download
by Michael D. (Mick) Bauer 09 Jan '04

09 Jan '04

Is there documentation anywhere for iptables.conf.in? There's no man-page or anything else I can find in Zorp GPL. Also, how does the average Zorp GPL user obtain iptables-utils? I got my deb-package from a Zorp Pro CD, but I've noticed that the Zorp GPL literature (Zorp Tutorial, etc.) refers to it too. Thanks, Mick Bauer /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 1

(no subject)
by "Петр Дущенко" 09 Jan '04

09 Jan '04

Hello I am understand that the Zorp Proxy Firewall suit is realy that I need. It`s greatful that this proxy has good flexibility in acces control. But I have problem with Zorp Proxy installing: i don`t have the Python Extclass 1.2. Please prompt me - where I can download the Python Extclass 1.2. With best regard, Peter Dushchenko Russia, Sakhalin island.

2 1