- zorp - lists.balabit.hu

zorp compile errors
by Villa Bajo 26 Oct '01

26 Oct '01

Hi all, I have got some problems installing zorp on my Redhat 7.1 freshly installed machine... Configure runs ok, i think, but if i want to make, it keeps stopping with errors... Here is the output when i run ./configure and after that make : creating cache ./config.cache checking for a BSD compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking whether make sets ${MAKE}... yes checking for working aclocal... found checking for working autoconf... found checking for working automake... found checking for working autoheader... found checking for working makeinfo... missing checking for gcc... gcc checking whether the C compiler (gcc -O2 ) works... yes checking whether the C compiler (gcc -O2 ) is a cross-compiler... no checking whether we are using GNU C... yes checking whether gcc accepts -g... yes checking how to run the C preprocessor... gcc -E checking host system type... i586-pc-linux-gnu checking build system type... i586-pc-linux-gnu checking for ranlib... ranlib checking for ld used by GCC... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes updating cache ./config.cache loading cache ./config.cache within ltconfig checking for object suffix... o checking for executable suffix... no checking for gcc option to produce PIC... -fPIC checking if gcc PIC flag -fPIC works... yes checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.lo... yes checking if gcc supports -fno-rtti -fno-exceptions ... yes checking if gcc static flag -static works... -static checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the linker (/usr/bin/ld) supports shared libraries... yes checking command to parse /usr/bin/nm -B output... ok checking how to hardcode library paths into programs... immediate checking for /usr/bin/ld option to reload object files... -r checking dynamic linker characteristics... Linux ld.so checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no checking for objdir... .libs creating libtool updating cache ./config.cache loading cache ./config.cache checking for python... /usr/bin/python checking for sys/capability.h... no checking for sys/prctl.h... yes checking for MSG_PROXY... yes checking for PR_SET_KEEPCAPS... yes checking for socket... yes checking for select... yes checking for snprintf... yes checking for vsnprintf... yes checking for strerror... yes checking for inet_aton... yes checking for strncpy... yes checking for prctl... yes checking for inet_addr in -lxnet... no checking for gethostbyname in -lnsl... yes checking for setsockopt in -lsocket... no checking for sin in -lm... yes checking for cap_set_proc in -lcap... no checking for des_ecb_encrypt in -lcrypto... yes checking for SSL_accept in -lssl... yes checking for pthread_create in -lpthread... yes checking for dlopen in -ldl... yes checking for Py_Finalize in -lpython1.5... no checking for Python libs in /usr/lib/python1.5/config... checking for Py_Finalize in -lpython1.5... yes checking whether to enable POSIX 1003.1e capability support... no updating cache ./config.cache creating ./config.status creating zorp-config creating scripts/zorpctl creating Makefile creating zorp/Makefile creating scripts/Makefile creating lib/Makefile creating lib/zorp/Makefile creating pylib/Makefile creating pylib/Zorp/Makefile creating doc/Makefile creating doc/examples/Makefile creating doc/man/Makefile creating modules/Makefile creating tests/Makefile creating tests/core/Makefile creating tests/functional/Makefile creating tests/functional/env_variables creating tests/functional/plug/Makefile creating tests/functional/plug/norm/Makefile creating tests/python/Makefile creating tests/python/runtest.sh creating debian/Makefile creating zorpconfig.h make all-recursive make[1]: Entering directory `/usr/local/zorp-0.8.8' Making all in lib make[2]: Entering directory `/usr/local/zorp-0.8.8/lib' Making all in zorp make[3]: Entering directory `/usr/local/zorp-0.8.8/lib/zorp' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/local/zorp-0.8.8/lib/zorp' Making all in . make[3]: Entering directory `/usr/local/zorp-0.8.8/lib' /bin/sh ../libtool --mode=compile c -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/local/zorp-0.8.8/lib -I/usr/local/ zorp-0.8.8 -I/usr/include/python1.5 -I/usr/include/glib-1.2 -I/usr/lib/glib /include -D_REENTRANT -O2 -Wall -D_GNU_SOURCE -c io.c gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/local/zorp-0.8.8/lib -I/usr/local/zo rp-0.8.8 -I/usr/include/python1.5 -I/usr/include/glib-1.2 -I/usr/lib/glib/include -D_REENTRANT -O2 -Wall -D_GN U_SOURCE -c -fPIC -DPIC io.c -o i o.lo io.c:177: parse error before `GStaticRecMutex' io.c:177: warning: no semicolon at end of struct or union io.c:178: warning: type defaults to `int' in declaration of `ZIORealConnect' io.c:178: warning: data definition has no type or storage class io.c: In function `z_io_connect_connected': io.c:191: `self' undeclared (first use in this function) io.c:191: (Each undeclared identifier is reported only once io.c:191: for each function it appears in.) io.c:191: parse error before `)' io.c: In function `z_io_connect_start': io.c:239: `self' undeclared (first use in this function) io.c:239: parse error before `)' io.c: In function `z_io_connect_new': io.c:303: `self' undeclared (first use in this function) io.c:303: parse error before `)' io.c: In function `z_io_connect_free_func': io.c:341: `self' undeclared (first use in this function) io.c:341: parse error before `)' io.c: In function `z_io_connect_free': io.c:366: `self' undeclared (first use in this function) io.c:366: parse error before `)' io.c: In function `z_io_connect_ref': io.c:389: `self' undeclared (first use in this function) io.c:389: parse error before `)' io.c:392: warning: implicit declaration of function `g_static_rec_mutex_lock' io.c:394: warning: implicit declaration of function `g_static_rec_mutex_unlock' io.c: In function `z_io_connect_unref': io.c:401: `self' undeclared (first use in this function) io.c:401: parse error before `)' io.c: At top level: io.c:434: parse error before `GStaticRecMutex' io.c:434: warning: no semicolon at end of struct or union io.c:435: warning: type defaults to `int' in declaration of `ZIORealListen' io.c:435: warning: data definition has no type or storage class io.c: In function `z_io_listen_accept': io.c:445: `self' undeclared (first use in this function) io.c:445: parse error before `)' io.c:448: warning: `accept_one' might be used uninitialized in this function io.c:449: warning: `user_data' might be used uninitialized in this function io.c:450: warning: `callback' might be used uninitialized in this function io.c: In function `z_io_listen_new': io.c:512: `self' undeclared (first use in this function) io.c:512: parse error before `)' io.c: In function `z_io_listen_start': io.c:563: `self' undeclared (first use in this function) io.c:563: parse error before `)' io.c: In function `z_io_listen_free_func': io.c:586: `self' undeclared (first use in this function) io.c:586: parse error before `)' io.c: In function `z_io_listen_free': io.c:610: `self' undeclared (first use in this function) io.c:610: parse error before `)' io.c: In function `z_io_listen_ref': io.c:628: `self' undeclared (first use in this function) io.c:628: parse error before `)' io.c: In function `z_io_listen_unref': io.c:640: `self' undeclared (first use in this function) io.c:640: parse error before `)' make[3]: *** [io.lo] Error 1 make[3]: Leaving directory `/usr/local/zorp-0.8.8/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/local/zorp-0.8.8/lib' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/local/zorp-0.8.8' make: *** [all-recursive-am] Error 2 Can anyone tell me what is going wrong here ? Cause I havent got a clue ! Any help is appreciated ! Jeroen

3 2

Still zorp install problems
by Villa Bajo 22 Oct '01

22 Oct '01

Hi All, After installing glib again which solved the errors in my previous post, i now have the problem of pyproxy.c including a file called ExtensionClass.h . It cannot find it. Neither can i. Where should this file be ? And why could it not be there ? Thanks in advance for any help ! greets, Jeroen

2 1

OpenBSD???
by Rusty 17 Oct '01

17 Oct '01

I read that someone was porting this product to OpenBSD. Has there been any progress?? Rusty

2 1

zorp Pop3 module
by Ibrahim Cherri 17 Oct '01

17 Oct '01

Hello I have lately compiled the source of zorp 0.8.8, but the Pop3 module seems to be missing. Any idea of the cause? thanx Ibrahim

2 1

zorp Pop3 module
by Ibrahim Cherri 17 Oct '01

17 Oct '01

Hello I have lately compiled the source of zorp 0.8.8, but the Pop3 module seems to be missing. Any idea of the cause? thanx Ibrahim

1 0

zorp distribution key
by Balazs Scheidler 01 Aug '01

01 Aug '01

From now on each released Zorp package will be signed with the attached key. I signed it with my own PGP key to prove its authenticity. It will be published on our web site soon. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 0

Re: [zorp] Zorp IDS functionality
by Balazs Scheidler 26 Jul '01

26 Jul '01

> Hello! > > I have a little question. > > Is it possible to lock out an ip address from the communication for a > while, if the zorp detects that some error repeated in the communication. > (for example: There is WEB server in DMZ. The "bad guy" try some evil URL, > and for the first x times the WEB server said some error, before the "bad > guy" find a hole. Zorp detects the "error" answares from the WEB server and > closes the communication with the "bad guy"s ip address for a "configurable > time", if x > "a configurable parameter". > > So, I think it is possible with zorp, but I have a very limited phyton > programming skill. So could anybody write an examply policy.py??? Of course it is possible ;) first of all you must define who a bad guy is. someone posting requests frequently with non-200 return codes (the OK return code in HTTP). Or someone posting suspicious filenames (containing /etc/passwd for example). Once this is defined, you have to hook into the appropriate events. Afterwards you will need a hash table containing bad guys. The index will be the IP address, and the value is the number of times that given IP address did something bad. Each suspicious event increments this value, and once it reaches a threshold, further requests should be denied. An additional control should be added, to decrement this threshold, for example 1% in each minute. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 0

Zorp IDS functionality?
by endre.wagner＠dataware.debis.hu 26 Jul '01

26 Jul '01

Hello! I have a little question. Is it possible to lock out an ip address from the communication for a while, if the zorp detects that some error repeated in the communication. (for example: There is WEB server in DMZ. The "bad guy" try some evil URL, and for the first x times the WEB server said some error, before the "bad guy" find a hole. Zorp detects the "error" answares from the WEB server and closes the communication with the "bad guy"s ip address for a "configurable time", if x > "a configurable parameter". So, I think it is possible with zorp, but I have a very limited phyton programming skill. So could anybody write an examply policy.py??? Edge

1 0

Re: Supported OS' for Zorp firewall
by Balazs Scheidler 18 Jul '01

18 Jul '01

On Wed, Jul 18, 2001 at 11:03:35AM +0200, Andreas Pauley wrote: > Hi, > I would like to know on what Operating Systems will Zorp run. > Are FreeBSD and OpenBSD supported? 0.9.1 was successfully compiled under FreeBSD, however only TCP based proxying works, forging TCP source addresses and UDP connection tracking doesn't. The core of Zorp is quite platform independent, but some features require platform dependent functions, which are either not implemented under *BSD, or we don't know how they can be used. Works: * redirection via ipfw or ipfilter, Zorp finds the original destination (requires --enable-ipfilter configure option) Doesn't work: * setting the outgoing source IP address of TCP connections (required when you want to send real client IPs to a server in your protected zone) * intercept connections without REDIRECT rule (used by the FTP proxy when the data channel is established) -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 0

Re: query abort zorp firewall suite?
by Balazs Scheidler 18 Jul '01

18 Jul '01

On Wed, Jul 18, 2001 at 09:52:57AM +0800, Wang Huayong wrote: > Dear sir or madam, > Sorry to disturb you. I am very interested in your product Zorp > firewall suite. I want to know if it can installed on Linux. I meet > trouble when compiling the src on Linux. Thank you for your help. Zorp was developed under Debian GNU/Linux and compiling it requires a couple of packages: python-1.5.2 python-dev 1.5.2 python-extclass 1.2 libcap 1.10 (available from our web site) libglib 1.3.1 (available from our web site) openssl 0.9.5 or later libssl095 and libssl095-dev if you have installed all of these and still can't compile zorp, the error message would be useful. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 0