- zorp - lists.balabit.hu

zorp tutorial released
by Balazs Scheidler 03 Jan '03

03 Jan '03

Hi, We have prepared a small introduction to Zorp and the installation of Zorp. It will be bundled with the Zorp source distribution but is also available online at http://www.balabit.hu/en/downloads/zorp-gpl/docs/zorp-tutorial.txt -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 0

Zorp Compile Error
by Marcos Orfila - INCO 19 Dec '02

19 Dec '02

Hi everybody, This can be a trivial problem for some of you (probably most of you), but my experience with gcc is not much. I apologize for the noise. Well, I think I'm about to succeed. I have problems linking the "zorp" binary. I guess it's because the linker can't find some Python libraries, but I just don't know what to modify in the "zorp/Makefile" file. Here is the result of executing "make" in the directory "zorp" of the zorp-2.0pre21 distribution (I've already executed "make" in the base directory and I got stuck here): --------------------------------------------------------------------------------- [root@yogurtu zorp]# make /bin/sh ../libtool --mode=link gcc -I/usr/local/include/python2.2 -g -Wall -W -D_GNU_SOURCE -I/usr/local/include/python2.2 -I/home/sources/ExtensionClass-1.2 -o zorp main.o ../lib/libzorp.la /usr/local/lib/libzorpll.so -ldl -lpthread -lssl -lcrypto -lm -lnsl -L/usr/lib/debug -Wl,--export-dynamic -L/usr/local/lib -lgthread-2.0 -lpthread -lgmodule-2.0 -ldl -lglib-2.0 gcc -I/usr/local/include/python2.2 -g -Wall -W -D_GNU_SOURCE -I/usr/local/include/python2.2 -I/home/sources/ExtensionClass-1.2 -o .libs/zorp main.o /usr/local/lib/libzorpll.so -Wl,--export-dynamic ../lib/.libs/libzorp.so -L/usr/lib/debug -L/usr/local/lib -lssl -lcrypto -lm -lnsl /usr/local/lib/libgthread-2.0.so -lpthread /usr/local/lib/libgmodule-2.0.so -ldl /usr/local/lib/libglib-2.0.so -Wl,--rpath -Wl,/usr/local/zorp/lib -Wl,--rpath -Wl,/usr/local/lib ../lib/.libs/libzorp.so: undefined reference to `PyExc_IOError' ../lib/.libs/libzorp.so: undefined reference to `PyInt_FromLong' ../lib/.libs/libzorp.so: undefined reference to `PyExc_RuntimeError' ../lib/.libs/libzorp.so: undefined reference to `PySequence_GetItem' ../lib/.libs/libzorp.so: undefined reference to `PyThreadState_Clear' ../lib/.libs/libzorp.so: undefined reference to `PyObject_CallFunction' ../lib/.libs/libzorp.so: undefined reference to `PyEval_AcquireLock' ../lib/.libs/libzorp.so: undefined reference to `PyList_Size' ../lib/.libs/libzorp.so: undefined reference to `_Py_NoneStruct' ../lib/.libs/libzorp.so: undefined reference to `PyFloat_Type' ../lib/.libs/libzorp.so: undefined reference to `PyString_Type' ../lib/.libs/libzorp.so: undefined reference to `PyImport_AddModule' ../lib/.libs/libzorp.so: undefined reference to `PyObject_Init' ../lib/.libs/libzorp.so: undefined reference to `_PyThreadState_Current' ../lib/.libs/libzorp.so: undefined reference to `Py_BuildValue' ../lib/.libs/libzorp.so: undefined reference to `Py_Finalize' ../lib/.libs/libzorp.so: undefined reference to `PyExc_KeyError' ../lib/.libs/libzorp.so: undefined reference to `PyThreadState_Delete' ../lib/.libs/libzorp.so: undefined reference to `PyErr_SetString' ../lib/.libs/libzorp.so: undefined reference to `PyErr_Fetch' ../lib/.libs/libzorp.so: undefined reference to `PyErr_Occurred' ../lib/.libs/libzorp.so: undefined reference to `Py_FindMethod' ../lib/.libs/libzorp.so: undefined reference to `PyEval_RestoreThread' ../lib/.libs/libzorp.so: undefined reference to `PyEval_AcquireThread' ../lib/.libs/libzorp.so: undefined reference to `Py_InitModule4' ../lib/.libs/libzorp.so: undefined reference to `Py_Initialize' ../lib/.libs/libzorp.so: undefined reference to `PyArg_ParseTupleAndKeywords' ../lib/.libs/libzorp.so: undefined reference to `PyObject_GetAttrString' ../lib/.libs/libzorp.so: undefined reference to `PyErr_NormalizeException' ../lib/.libs/libzorp.so: undefined reference to `PyCallable_Check' ../lib/.libs/libzorp.so: undefined reference to `PyRun_SimpleFile' ../lib/.libs/libzorp.so: undefined reference to `PyEval_ReleaseThread' ../lib/.libs/libzorp.so: undefined reference to `PyList_SetItem' ../lib/.libs/libzorp.so: undefined reference to `PyTuple_GetItem' ../lib/.libs/libzorp.so: undefined reference to `PyImport_ImportModule' ../lib/.libs/libzorp.so: undefined reference to `PyEval_ReleaseLock' ../lib/.libs/libzorp.so: undefined reference to `PyErr_Clear' ../lib/.libs/libzorp.so: undefined reference to `PyString_AsString' ../lib/.libs/libzorp.so: undefined reference to `PyString_FromString' ../lib/.libs/libzorp.so: undefined reference to `PyExc_ValueError' ../lib/.libs/libzorp.so: undefined reference to `crypt' ../lib/.libs/libzorp.so: undefined reference to `PyExc_TypeError' ../lib/.libs/libzorp.so: undefined reference to `PyList_GetItem' ../lib/.libs/libzorp.so: undefined reference to `PyList_New' ../lib/.libs/libzorp.so: undefined reference to `PyObject_Repr' ../lib/.libs/libzorp.so: undefined reference to `PyCObject_AsVoidPtr' ../lib/.libs/libzorp.so: undefined reference to `PyEval_SaveThread' ../lib/.libs/libzorp.so: undefined reference to `PyFloat_AsDouble' ../lib/.libs/libzorp.so: undefined reference to `PyObject_Str' ../lib/.libs/libzorp.so: undefined reference to `PyObject_Size' ../lib/.libs/libzorp.so: undefined reference to `PyModule_GetDict' ../lib/.libs/libzorp.so: undefined reference to `PyTuple_Type' ../lib/.libs/libzorp.so: undefined reference to `PyExc_AttributeError' ../lib/.libs/libzorp.so: undefined reference to `PyErr_Format' ../lib/.libs/libzorp.so: undefined reference to `PyObject_CallObject' ../lib/.libs/libzorp.so: undefined reference to `PyTuple_Size' ../lib/.libs/libzorp.so: undefined reference to `PyThreadState_New' ../lib/.libs/libzorp.so: undefined reference to `PyType_IsSubtype' ../lib/.libs/libzorp.so: undefined reference to `PyInt_Type' ../lib/.libs/libzorp.so: undefined reference to `PyEval_InitThreads' ../lib/.libs/libzorp.so: undefined reference to `PyObject_SetAttrString' ../lib/.libs/libzorp.so: undefined reference to `PyList_Type' ../lib/.libs/libzorp.so: undefined reference to `PyInt_AsLong' ../lib/.libs/libzorp.so: undefined reference to `PyArg_Parse' ../lib/.libs/libzorp.so: undefined reference to `PyErr_Print' ../lib/.libs/libzorp.so: undefined reference to `PyErr_SetObject' ../lib/.libs/libzorp.so: undefined reference to `PyType_Type' ../lib/.libs/libzorp.so: undefined reference to `PyArg_ParseTuple' ../lib/.libs/libzorp.so: undefined reference to `PySequence_Check' ../lib/.libs/libzorp.so: undefined reference to `PyTuple_New' ../lib/.libs/libzorp.so: undefined reference to `PyEval_CallFunction' collect2: ld returned 1 exit status make: *** [zorp] Error 1 [root@yogurtu zorp]# --------------------------------------------------------------------------------- Kind regards, Marcos Orfila

1 0

Files missing in the zorp-2.0pre21 TarBall
by Marcos Orfila - INCO 19 Dec '02

19 Dec '02

Hello everybody, I think there's a problem with the zorp-2.0pre21 TarBall. Some files that exist in zorp-1.4.8 are not present in the zorp-2.0pre21 TarBall I downloaded from "http://www.balabit.hu/downloads/zorp/2.0/src/zorp-2.0pre21.tar.gz". Here are the compile errors: ------------------------------------------------------------------------------------ [root@yogurtu zorp-2.0pre21]# make make all-recursive make[1]: Entering directory `/home/sources/zorp-2.0pre21' Making all in lib make[2]: Entering directory `/home/sources/zorp-2.0pre21/lib' Making all in zorp make[3]: Entering directory `/home/sources/zorp-2.0pre21/lib/zorp' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/home/sources/zorp-2.0pre21/lib/zorp' make[3]: Entering directory `/home/sources/zorp-2.0pre21/lib' /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/home/sources/zorp-2.0pre21/lib -I/home/sources/zorp-2.0pre21 -D_REENTRANT -I/usr/local/include/glib-2.0 -I/usr/local/lib/glib-2.0/include -D_GNU_SOURCE -D_REENTRANT -I/usr/local/include -I/usr/local/include/glib-2.0 -I/usr/local/lib/glib-2.0/include -g -Wall -W -D_GNU_SOURCE -c proxy.c gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/home/sources/zorp-2.0pre21/lib -I/home/sources/zorp-2.0pre21 -D_REENTRANT -I/usr/local/include/glib-2.0 -I/usr/local/lib/glib-2.0/include -D_GNU_SOURCE -D_REENTRANT -I/usr/local/include -I/usr/local/include/glib-2.0 -I/usr/local/lib/glib-2.0/include -g -Wall -W -D_GNU_SOURCE -c proxy.c -fPIC -DPIC -o proxy.lo In file included from proxy.c:33: zorp/proxy.h:31:25: zorp/stream.h: No such file or directory In file included from zorp/zpython.h:31, from zorp/proxy.h:32, from proxy.c:33: zorp/zorp.h:31:32: zorp/zorplibconfig.h: No such file or directory In file included from zorp/zpython.h:31, from zorp/proxy.h:32, from proxy.c:33: zorp/zorp.h:34:23: zorp/misc.h: No such file or directory In file included from zorp/proxy.h:32, from proxy.c:33: zorp/zpython.h:32:20: Python.h: No such file or directory In file included from zorp/proxy.h:33, from proxy.c:33: zorp/conntrack.h:8:23: zorp/poll.h: No such file or directory zorp/conntrack.h:9:27: zorp/sockaddr.h: No such file or directory zorp/conntrack.h:10:25: zorp/stream.h: No such file or directory In file included from zorp/conntrack.h:12, from zorp/proxy.h:33, from proxy.c:33: zorp/packet.h:4:27: zorp/sockaddr.h: No such file or directory In file included from zorp/proxy.h:35, from proxy.c:33: zorp/dispatch.h:5:25: zorp/stream.h: No such file or directory zorp/dispatch.h:6:27: zorp/sockaddr.h: No such file or directory In file included from zorp/dispatch.h:7, from zorp/proxy.h:35, from proxy.c:33: zorp/connection.h:4:25: zorp/stream.h: No such file or directory zorp/connection.h:5:27: zorp/sockaddr.h: No such file or directory In file included from zorp/proxy.h:36, from proxy.c:33: zorp/fastpath.h:4:27: zorp/sockaddr.h: No such file or directory zorp/fastpath.h:5:25: zorp/stream.h: No such file or directory In file included from proxy.c:36: zorp/pystream.h:32:25: zorp/stream.h: No such file or directory In file included from proxy.c:37: zorp/pysockaddr.h:32:27: zorp/sockaddr.h: No such file or directory proxy.c:38:27: zorp/streamfd.h: No such file or directory proxy.c:39:22: zorp/log.h: No such file or directory proxy.c:40:21: zorp/io.h: No such file or directory make[3]: *** [proxy.lo] Error 1 make[3]: Leaving directory `/home/sources/zorp-2.0pre21/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/sources/zorp-2.0pre21/lib' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/sources/zorp-2.0pre21' make: *** [all-recursive-am] Error 2 [root@yogurtu zorp-2.0pre21]# ------------------------------------------------------------------------------------ Kind regards, Marcos Orfila Montevideo - Uruguay

2 1

zorp & debian sid
by Alexandru Hartmann 25 Nov '02

25 Nov '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi i just installed zorp on a debian sid box, did some configuration and tryied to fire it up : - ------------------------- # /etc/init.d/zorp start Warning: The number of file descriptors is 1024. You might want to increase this. /usr/sbin/zorpctl: line 100: [: unlimited: integer expression expected Starting Zorp Firewall Suite: zorp - -------------------------- should i really increase that ? and here is the output of syslog: - --------------------------- Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): Verbosity level: 3 Nov 23 11:53:35 xxxxxxx zorp[4577]: (Log thread): thread starting; Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): System dependant init; sysdep_tproxy='1' Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): Changing process capabilities; caps='= cap_net_bind_service+ep cap_net_admin+p' Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): Changing process capabilities; caps='= cap_net_bind_service,cap_net_admin+ep' Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): bind() failed; error='No such file or directory' Nov 23 11:53:35 xxxxxxx zorp[4575]: (noname/nosession): Resetting process capabilities; caps='= cap_net_bind_service,cap_net_admin+p' Nov 23 11:53:35 xxxxxxx zorp[4580]: (conntrack/thread): thread starting; Nov 23 11:53:35 xxxxxxx zorp[4575]: zorp version 2.0pre25 starting up Nov 23 11:53:35 xxxxxxx zorp[4577]: (Log thread): Traceback (most recent call last): Nov 23 11:53:35 xxxxxxx zorp[4575]: (zorp/nosession): Error opening policy file /etc/zorp/policy.py Nov 23 11:53:35 xxxxxxx zorp[4577]: (Log thread): File "/etc/zorp/policy.py", line 25, in ? Nov 23 11:53:35 xxxxxxx zorp[4575]: zorp version 2.0pre25 going down. Nov 23 11:53:35 xxxxxxx zorp[4577]: (Log thread): from Zorp.Chainer import TransparentChainer, DirectedChainer, InbandChainer, FailoverChainer Nov 23 11:53:35 xxxxxxx zorp[4577]: (Log thread): ImportError: cannot import name TransparentChainer - ----------------------------- it seems to me that i'm missing some modules. the file /etc/zorp/policy.py is there : total 24 - -rw-r--r-- 1 root root 652 Nov 23 11:31 instances.conf - -rw-r--r-- 1 root root 618 Nov 21 11:03 instances.conf.sample - -rw-r--r-- 1 root root 4947 Nov 23 11:53 policy.py - -rw-r--r-- 1 root root 4987 Nov 21 11:03 policy.py.sample could it be that i'm missing some modules ? the truth is that i don't have any TransparentChainer.py nor DirectedChainer.py in /usr/share/zorp. does anybody have some hints for me ? thanks, Alex -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE932MT2IXmeZ1EC3oRAqFzAKCYHY95S526aopeHjrMS2Bsfq1CDwCgigfq MG2esdJKBIWnbpT3tx85zVw= =u3lW -----END PGP SIGNATURE-----

2 2

Zorp GPL 1.4.6
by Peter HOLTZL 29 Aug '02

29 Aug '02

Hi! Zorp GPL has been released. Here is the news file: Bugfixes: Core: * fixes a bug in Zone.setAddrParent SSL: * fixed an EOF handling bug triggered by SSL_accept and SSL_connect * do not log certificate verification errors when SSL_VERIFY_NONE is requested. Some minor new features: Core: * Kernel independent connection timeout. Set to 30 seconds. * Include 2.4 Transparent proxy patch handling. regards, Péter HÖLTZL Ho:ltzl Pe'ter | Tel: +36 1 371-0540 | GnuPG Fingerprint: BalaBit IT Kft | Mobil: +36 20 366-9667 | DB30 5E5B 8777 C06F 5A1F holtzl.peter(a)balabit.hu | http://www.balabit.hu/ | 4586 CEAF 9678 4A89 CFD6

1 0

Real ZOO web site, welcome! <}rusColvwv1edodelw1kx>
by Arcady 13135 30 Jun '02

30 Jun '02

1 0

Zorp GPL 1.4.4
by Peter HOLTZL 29 Jun '02

29 Jun '02

Sziasztok! Megjelent a Zorp GPL 1.4.4. A legfobb ujdonsag, hogy a HttpProxy-ban limitalhato a chunk meret (lasd legutobbi Apache bug). Mindenkinek jo telepitest kivanok! HIBJAVITASOK: Core: * javitott memoria leak az ssl-ben; * helyesen kezel minden exception-t a Connect(); * default_reject a OneToOneNAT-ban; * socket-lezárás, ha a satyrd-hez nem tud kapcsolodni * helyes CAP_NET_BIND_SERVICE capability kezelés UDP-s service-eknél; * javitott warnig utenet signed/unsigned * javitot race condition a ZorpListener felszabaditásaban; Új TULAJDONSÁGOK: Core: * Sun gethostbyname_r támogatása; Http: * limitálható chunk méret (ld. Apache hiba); -- Höltzl Péter Ho:ltzl Pe'ter | Tel: +36 1 371-0540 | GnuPG Fingerprint: BalaBit IT Kft | Mobil: +36 20 366-9667 | DB30 5E5B 8777 C06F 5A1F holtzl.peter(a)balabit.hu | http://www.balabit.hu/ | 4586 CEAF 9678 4A89 CFD6

3 4

Zorp GPL 1.4.3
by Peter HOLTZL 22 May '02

22 May '02

1 0

Zorp GPL 1.4.2
by Peter HOLTZL 22 May '02

22 May '02

Dear List, Zorp GPL 1.4.2 has been released: Zorp GPL 1.4.2 Tue May 21 17:15:39 CEST 2002 Bugfixes: Core: * Fixed a race condition in listener (possible SIGSEGV) * Fixed a bug in z_py_gethostbyname (possible SIGSEGV) * Fixes for Solaris support. * Fixed two small memory leaks in SSL handling Ftp: * Fixed a race condition, when ftp proxy exited earlier than its stacked plug proxy Some minor features: Core: * Generalize a few log messages * New NAT classes - StaticNAT - OneToOneMultiNAT Peter HOLTZL -- Ho:ltzl Pe'ter | Tel/Fax:+36 1 371-0540 | GnuPG Fingerprint: BalaBit IT Kft | Mobil: +36 20 366-9667 | DB30 5E5B 8777 C06F 5A1F holtzl.peter(a)balabit.hu | http://www.balabit.hu/ | 4586 CEAF 9678 4A89 CFD6

2 1

Zorp starting error
by Ibrahim Cherri 26 Oct '01

26 Oct '01

Hello After installing zorp on a redhat Linux machine, I edited policy.py and invoked "zorpctl start", i always get the following error. >Traceback (innermost last): >File "/etc/zorp/policy.py", line 53, in ? > inbound_services=["*"]), >File "/usr/local/zorp/share/zorp/pylib/Zorp/Zone.py", line 548, in __init__ > Zone.__init__(self, name, addr, inbound_services, outbound_services, admin_parent, umbrella, InetDomain) >File "/usr/local/zorp/share/zorp/pylib/Zorp/Zone.py", line 432, in __init__ > self.address = domain(addr) >File "/usr/local/zorp/share/zorp/pylib/Zorp/Domain.py", line 117, in __init__ > self.ip = inet_aton(parts[0]) & self.mask >TypeError: bad operand type(s) for & >(noname/nosession): Error opening policy file /etc/zorp/policy.py >zorp version 0.8.8 going down. I wonder if this had to do anything with the python interpreter, and how can I fix it. thanx Ibrahim

2 1