- zorp - lists.balabit.hu

filltable web pages and snapshot released
by Magosányi Árpád 10 Dec '03

10 Dec '03

Hi! [a magyar szöveg lejjebb] You can find the filltable pages at http://zorp-unoff.sourceforge.net/Filltable/index.html There is a security target (work in progress) and a daily snapshot released right now. The filltable utility is a python script to allow relatively untrusted (junior) GNU/Linux system adinistrators (for example system adinistrator of a chrooted sandbox) to modify specific parts of the linux netfilter configuration. The senior system administrator can designate specific packet classes (based on source/destination addresses, ports, etc) to be managed by the junior system administrator. These packet filter classes are directed to one or more netfilter chains. The junior system administrator can describe the configuration in a text file, which makes the input of the filltable utility. After that the senior system administrator can run the filltable utility on these files, thus modifying the configuration. The filltable script is strict on the syntax of its configuration script, thus makes compromising the execution domain of itself impossible. The filltable script is a Trusted Procedure in the sense of the Clark-Wilson access control modell. ------------------------------------------------- A filltable honlapjának helye: http://zorp-unoff.sourceforge.net/Filltable/index.html Van Biztonsági Rendszerterv (készülőben) és napi snapshot. Nincs kedvem lefordítani a bevezetőjét. -- GNU GPL: csak tiszta forrásból

1 0

Zorp-unoff: new site design
by Magosányi Árpád 10 Dec '03

10 Dec '03

Hi! [a magyar szöveg lejjebb] I still have no idea of the meaning of the word "aestethic", but could steal some tips from the design of the Gentoo site. Now we have news on the left bar. ---------------------------------------- Még mindig nem tudom mit jelenthet az a szó, hogy "esztétikus", de sikerült lopnom néhány ötletet a Gentoo weboldalról. A bal oldalon vannak hírek. -- GNU GPL: csak tiszta forrásból

1 0

AW: apt-source (was Re: [zorp] Zorp Pro 2.0, post-installation)
by Dominik Oestreicher 04 Dec '03

04 Dec '03

Hi, to install and configure Zorp is not an easy thing, so no question is to easy with this software ;-) I have added following line into my last installation: deb https://<user>:<password>@apt.balabit.hu/zorp-os/ 2.1 zorp-os zorp zorp-common zms zms-gui zms-gui-common zms-agent satyr zas Additionally I had to add Acquire::https::Peer-Verify-Level "0"; into the /apt/apt/apt.conf (or something like that) file because I received an error message about an untrusted certificate. At the moment I try to get the new virusbuster module running, but without success. One problem I ran into lately where a configuration mistake with a transparent proxy. Hint: Do not use the same port for "proxy port" and "rule port" when creating a transparent listener. It will not work and the error message will not really help ;-) Regards Dominik > -----Ursprüngliche Nachricht----- > Von: Michael D. (Mick) Bauer [mailto:darth.elmo@wiremonkeys.org] > Gesendet: Dienstag, 2. Dezember 2003 22:57 > An: zorp(a)lists.balabit.hu > Betreff: apt-source (was Re: [zorp] Zorp Pro 2.0, post-installation) > > > Hi, Major. > > Bazsi just gave me a username & password for the apt-source site. What > should my new sources.list entry look like? (Pardon the > newbie question, > but I don't use Debian often.) > > Thanks, > Mick > > > > On Tue, 2003-12-02 at 04:33, Michael D. (Mick) Bauer wrote: > >> By changing the OUTPUT default policy on my firewall to > ACCEPT, I was > >> able to connect from my ZMS client (actually I could've > achieved the > >> same thing by leaving it at DROP but by inserting an "accept > >> established" rule in the OUTPUT chain, right? And shouldn't that be > >> the default?). > > > > Yes, it should be the default. (also by default we don't use DROP > > rule on OUTPUT chain) > > > >> But immediately after successful authentication, I > received the error > >> "Request: missing or invalid type", and my ZMS client quit. > > > > It seems like you use zms-engine from the 2.0 series. Zms > client for > > windows is not available from the 2.0 series, but from the > 2.1. These > > are incompatible, so you have to upgrade your zms-engine to 2.1. The > > upgrade is available from the apt.balabit.hu apt-source, > but it require > > username/password. > > > > BTW: can you tell me the version of your installation CD? You can > > check it by booting from it, and pressing F9 on the > bootscreen, or mount > > it on a working machine and view the file > /cdrom/isolinux/version.scr. > > > > MCS > > > > > > > > _______________________________________________ > > zorp mailing list > > zorp(a)lists.balabit.hu > > http://lists.balabit.hu/mailman/listinfo/zorp > > > /-------------------------------------------------\ > | Michael D. (Mick) Bauer | > | Hired Goon Specializing in Information Security | > | Security Editor, Linux Journal | > | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | > \-------------------------------------------------/ > > > _______________________________________________ > zorp mailing list > zorp(a)lists.balabit.hu > http://lists.balabit.hu/mailman/listinfo/zorp >

2 1

RE: [zorp] unofficial zorp 2.0.7-2 is released
by Makay Kalman 04 Dec '03

04 Dec '03

THX Arpad and sorry. > Hi! > > Sorry for being hungarian. > > Here is the translation: > > > Sorry for the oftopic question. Is it good if the > development/fixes forked? > > It isn't a fork, this is why the unofficial zorp is official. ... .... > (well, it is not core to the extent that it isn't even zorp). >

1 0

RE: [zorp] unofficial zorp 2.0.7-2 is released
by Makay Kalman 03 Dec '03

03 Dec '03

Árpád, Offtopic buta kérdés, de mennyire jó az, ha kétirányba szakad a fejlesztés/javítás? Üdv., Makay Kálmán > > A Hivatalos Nemhivatalos Zorp project büszkén bejelenti a > zorp_2.0.7-2 verziót. > > Ez a verzió kikerül egy NPTL által behozott hibát, amit a > zorp ellen kritikusként jelentettek be. (Az NPTL nem szereti > ha a stack limit nem osztható 4-el.) > > Ha az új verziót feltelepíted, a puritánok kedvéért kapsz egy > üres instances.conf-ot is. > > > -- > GNU GPL: csak tiszta forrásból > _______________________________________________ > zorp mailing list > zorp(a)lists.balabit.hu > http://lists.balabit.hu/mailman/listinfo/zorp > >

3 3

URL for the announce
by Magosányi Árpád 03 Dec '03

03 Dec '03

Hi! You can download the new version from http://sourceforge.net/project/showfiles.php?group_id=93515&release_id=2014… And watch out for it apearing in Debian/testing. -- GNU GPL: csak tiszta forrásból

1 0

unofficial zorp 2.0.7-2 is released
by Magosányi Árpád 03 Dec '03

03 Dec '03

Hi! (A magyar szövegért lapozz lejjebb) The Official Unofficial Zorp project proudly announces the release of zorp_2.0.7-2. This minor version works around a bug introduced by the NPTL code, and reported against zorp as release-critical. (NPTL does not like stack limit not being dividable by four). You will also have an empty instances.conf if you install the new version, for the sake of purists. ---------------------End of english text.--------------------------- A Hivatalos Nemhivatalos Zorp project büszkén bejelenti a zorp_2.0.7-2 verziót. Ez a verzió kikerül egy NPTL által behozott hibát, amit a zorp ellen kritikusként jelentettek be. (Az NPTL nem szereti ha a stack limit nem osztható 4-el.) Ha az új verziót feltelepíted, a puritánok kedvéért kapsz egy üres instances.conf-ot is. -- GNU GPL: csak tiszta forrásból

1 0

Zorp Pro 2.0, post-installation
by Michael D. (Mick) Bauer 02 Dec '03

02 Dec '03

Hi, all. I've just installed Zorp Pro 2.0 for the first time, and I have two questions. First, is there a more current "Getting Started" pdf (English version) than the one on the balabit.com website? That one describes ZUI, which as far as I can tell has been deprecated in 2.0 in favor of ZMC, right? Second, I'm having trouble connecting to my freshly-installed firewall using ZMC (running on my Windows 98 laptop, since my CDROM appears to contain only the Windows and Debian versions of ZMC) -- I get the error "Can't resolve address," even though I've got both an A-record and a PTR-record for my firewall in my local LAN's DNS. I'm trying to connect to the firewall's internal interface on TCP 1310 (also tried TCP 1314; same error). If the answer to question #1 is "yes," the second question may not be so important. :-) Thanks, Mick Bauer /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/ /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/

2 4

Re: [zorp] Zorp Pro 2.0, post-installation
by Zoltan Kovacs 02 Dec '03

02 Dec '03

As far as I know the ZMS client on Windows working only with version 2.1 By changing the OUTPUT default policy on my firewall to ACCEPT, I was able to connect from my ZMS client (actually I could've achieved the same thing by leaving it at DROP but by inserting an "accept established" rule in the OUTPUT chain, right? And shouldn't that be the default?). But immediately after successful authentication, I received the error "Request: missing or invalid type", and my ZMS client quit. Thoughts? Thanks, Mick Bauer

1 0

unofficial zorp and zorplibll releases
by Magosányi Árpád (mag) 12 Nov '03

12 Nov '03

Hi! [Lapozz lejjebb a magyar változatért] You can find zorp 2.0.7-1 and zorplibll 2.0.26.23-1 released by the Official Unofficial Zorp project at http://sourceforge.net/project/showfiles.php?group_id=93515 The Official Unofficial Zorp homepage now contains a FAQ, some configuration examples and a help wanted page. --------------------------------------------------------- notes and changes for the zorp release: Notes: The packaging is changed a lot compared to the upstream version: all of the generated files are regenerated. that means you need autoconf if you plan to build from source. Changes: My changes: * new upstream version * regenerate all generated files, brings in build dependency on autoconf * rearranged some includes to make gcc happy Upstream changes: * minor bugfixes in the http and ftp proxies, and the core. * the way of tproxy detection is changed * the ftp proxy accepts PASS after succesful authentication --------------------------------------------------------- Notes and changes for the zorplibll release: Notes: It is basically the upstream version of zorplibll, but with some cleanups Changes: zorplibll (2.0.26.23-1) testing; urgency=low * squished some lintian warnings (suidregister, copyright boilerplate) * the source package name is zorplibll now --------------------------------------------------------- END OF ENGLISH TEXT --------------------------------------------------------- A Hivatalos Nemhivatalos Zorp project közzétette a zorp 2.0.7-1 -es és a zorplibll 2.0.26.23-1 -es verzióját a http://sourceforge.net/project/showfiles.php?group_id=93515 címen. A project weboldala tartalmaz egy FAQ-t, konfigurációs példákat és egy segítség kereső oldalt. A weboldal egyelőre angolul áll rendelkezésre, ha szeretnél magyar fordítást, tegyél érte:) --------------------------------------------------------- megjegyzések és változáslista a zorphoz: Megjegyzések: A csomagolás sokat változott az upstream verzióhoz képest: minden generált fájl újragenerálódik. Ez azt jelenti, hogy szükséged lesz autoconfra ha forrásból szeretnél fordítani. Változások: Az én változtatásaim: * új upstream verzió * újragenerál minden generált fájlt, fordítási függőséget hoz be az autoconfra * átrendeztem néhány include-ot hogy a gcc-t boldoggá tegyem. Upstream változtatások: * kisebb hibajavítások a http és ftp proxykban és a core-ban * a tproxy detektálás módja megváltozott * az ftp proxy megengedi a PASS parancsot a sikeres authentikáció után. --------------------------------------------------------- Megjegyzések és változások a zorplibll-hez: Megjegyzések: Ez gyakorlatilag az upstream verzió, kis takarítással. Változtatások: zorplibll (2.0.26.23-1) testing; urgency=low * elimináltam néhány lintian figyelmeztetést (suidregister, copyright mintaszöveg) * a forráscsomag neve zorplibll

1 0