-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I'm trying to setup zorp on an bridge, my problem is that I get this error messages Mar 27 14:19:51 debian intern[3197]: (noname/nosession): Verbosity level: 3 Mar 27 14:19:51 debian extern[3207]: (noname/nosession): Verbosity level: 3 Mar 27 14:19:51 debian intern[3197]: (noname/nosession): bind() failed; error='No such file or directory' Mar 27 14:19:51 debian extern[3207]: (noname/nosession): bind() failed; error='No such file or directory my configs instances.conf: intern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.1' extern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.2' policy.py: from Zorp.Core import * from Zorp.Http import * InetZone('intern', '10.156.1.0/24', outbound_services=['intern_HTTP']) InetZone('extern', '0.0.0.0/0', inbound_services=['intern_HTTP']) def intern(): Service('intern_HTTP', HttpProxy) Listener(SockAddrInet('10.156.1.253', 50080), 'intern_HTTP') def extern(): pass # ifconfig br0 Link encap:Ethernet HWaddr 00:10:5A:A1:02:60 inet addr:10.156.1.253 Bcast:10.156.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:23611 errors:0 dropped:0 overruns:0 frame:0 TX packets:10379 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:6080267 (5.7 MiB) TX bytes:1763635 (1.6 MiB) dummy0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:1.1.1.1 Bcast:1.255.255.255 Mask:255.255.255.255 UP BROADCAST RUNNING NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) dummy1 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:1.1.1.2 Bcast:1.255.255.255 Mask:255.255.255.255 UP BROADCAST RUNNING NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) eth0 Link encap:Ethernet HWaddr 00:60:08:CA:33:1B UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:31576 errors:0 dropped:0 overruns:0 frame:0 TX packets:14942 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:12715003 (12.1 MiB) TX bytes:2462412 (2.3 MiB) Interrupt:5 Base address:0xb000 eth1 Link encap:Ethernet HWaddr 00:10:5A:A1:02:60 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:7095 errors:0 dropped:0 overruns:0 carrier:7095 collisions:0 txqueuelen:100 RX bytes:0 (0.0 b) TX bytes:427400 (417.3 KiB) Interrupt:10 Base address:0xa800 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:12 errors:0 dropped:0 overruns:0 frame:0 TX packets:12 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1136 (1.1 KiB) TX bytes:1136 (1.1 KiB) and one question I also have is: Do I really need to do that via dummy devices? or is there a better way? - -- Regards, Robert - ---------------- Robert Penz robert.penz AT outertech.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+gvyg8tTsQqJDUBMRAkPpAJ46vLgVr18GIpgVw5U/wP9am4rldQCeMp6Q JL77DOrs+Wmq1EkGmSHGOjY= =5fI/ -----END PGP SIGNATURE-----
On Thu, 27 Mar 2003, Robert Penz wrote:
Hi!
I'm trying to setup zorp on an bridge, my problem is that I get this error messages
Mar 27 14:19:51 debian intern[3197]: (noname/nosession): Verbosity level: 3 Mar 27 14:19:51 debian extern[3207]: (noname/nosession): Verbosity level: 3 Mar 27 14:19:51 debian intern[3197]: (noname/nosession): bind() failed; error='No such file or directory' Mar 27 14:19:51 debian extern[3207]: (noname/nosession): bind() failed; error='No such file or directory
I had the same error due to lackness of the /var/run/zorp directory. At least with my configuration zorp needed to do an udp socket there. Try to run the two zorp instances with strace as follows: strace /usr/lib/zorp/zorp --as intern -B 1.1.1.1 --verbose 3 -p /path/to/your/instances-config -l >& zorp.log Then search for your error, and hopefully you will find what's wrong there.
my configs
instances.conf:
intern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.1' extern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.2'
Are you sure about the autobind syntax? We are using "-B 1.1.1.1", from the usage info it would seem that you should use "--autobind-ip 1.1.1.1" ...
and one question I also have is: Do I really need to do that via dummy devices? or is there a better way?
We are now using one of the server's ip, and I didn't observe any difference from using a dummy interface. Hope it helps, tito.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday 29 March 2003 17:58, Tito Flagella wrote:
I had the same error due to lackness of the /var/run/zorp directory. created that directory and i didn't get that error messages anymore, thx.
At least with my configuration zorp needed to do an udp socket there. not really a socket but
debian:/var/run/zorp# l total 0 srwxr-xr-x 1 root root 0 Mar 31 10:38 zorpctl.extern srwxr-xr-x 1 root root 0 Mar 31 10:38 zorpctl.intern not very secure
intern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.1' extern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.2' Are you sure about the autobind syntax? We are using "-B 1.1.1.1", from the usage info it would seem that you should use "--autobind-ip 1.1.1.1" I know also of the -B stuff, I can also take that one ;-)
We are now using one of the server's ip, and I didn't observe any difference from using a dummy interface. my problem is that a bridge has only one ip on all interfaces, and I believe I can only bind on instance to an ip.
- -- Regards, Robert - ---------------- Robert Penz robert.penz AT outertech.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+h//l8tTsQqJDUBMRAtTAAJ9buj5mBluo/jKVpJ9EOdggPzOH1wCfWBS7 XlKzkme9+Oj6e4HE4mKUiiE= =dPAB -----END PGP SIGNATURE-----
On Mon, Mar 31, 2003 at 10:44:15AM +0200, Robert Penz wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Saturday 29 March 2003 17:58, Tito Flagella wrote:
I had the same error due to lackness of the /var/run/zorp directory. created that directory and i didn't get that error messages anymore, thx.
At least with my configuration zorp needed to do an udp socket there. not really a socket but
debian:/var/run/zorp# l total 0 srwxr-xr-x 1 root root 0 Mar 31 10:38 zorpctl.extern srwxr-xr-x 1 root root 0 Mar 31 10:38 zorpctl.intern
not very secure
These sockets are placeholders for IPC communication between Zorp and local processes. For now they are not really used, the only possibility is to query the running threads in a given instance. The file permissions on the directory /var/run/zorp should be more restrictive. (e.g. 700) however I'm adding a bugticket to fix the file permissions as well.
intern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.1' extern -v3 -p /etc/zorp/policy.py --autobind-ip autobind='1.1.1.2' Are you sure about the autobind syntax? We are using "-B 1.1.1.1", from the usage info it would seem that you should use "--autobind-ip 1.1.1.1" I know also of the -B stuff, I can also take that one ;-)
We are now using one of the server's ip, and I didn't observe any difference from using a dummy interface. my problem is that a bridge has only one ip on all interfaces, and I believe I can only bind on instance to an ip.
No, the dummy IP can be shared among instances. The dummy address is basically used for redirection to the local IP stack. When Zorp wants to initiate a connection from a foreign IP address it binds to the dummy interface and registers a NAT mapping between the local address and the foreign address. So the only requirement that autobind-ip is local and definitely not 127.0.0.1 -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
participants (3)
-
Balazs Scheidler
-
Robert Penz
-
Tito Flagella