Ah, thanks for the flag to give a traceback of the error. After running with the "-l" flag I found several errors in my policy.py: in three places I had Listen(...) instead of Listener(...), and there was a type mismatch because I used quotes around port numbers in many places. Now that I've fixed these, Zorp is working fine. It would be nice in future versions to have zorp/zorpctl give an error message such as "Parse error in policy file: /etc/zorp/policy.py:8: <error message here>", such as Apache and other config-file based daemons do, to make debugging bad policy files less complicated. Thanks for the help, Matt Hackett Research Associate MixZon Inc. 1033 SW Yamhill St. Portland, OR 97201 (503) 222-1022 -----Original Message----- From: SZALAY Attila [mailto:sasa@balabit.hu] Sent: Wednesday, July 02, 2003 11:14 AM To: zorp@lists.balabit.hu Subject: Re: [zorp] Policy.py gives errors Hi All! On 2003 Jul 02, Matt Hackett wrote:
I've been trying to get Zorp working for several days now and have run into a variety of problems. After struggling to get the last source version from the site properly compiled (we use a PaX-patched kernel and it took a while to get Zorp to compile with completely PIC) I've finally got a running zorp executable. Except that it chokes on my policy file. I've gone through the indentation and such, so to really test what was going on I set PYTHONPATH to the zorp/pylib directory and ran "python policy.py" which returned this:
C part of Zorp export some class and function to python level. Because of this you get problems when you try to run policy.py outside of Zorp.
Shouldn't these be coming from the Python 'socket' anyways?
No. It's coming from codes written in C. Try to run zorp like this: /usr/lib/zorp/zorp --as internal_out --policy /etc/zorp/policy.py -v3 -l Of course change the path of zorp and policy.py to correct value. And send result to me please. -- Szalay Attila BalaBit IT Biztonságtechnikai Kft. tel:(36-1)-371-05-40 1116 Bp. Csurgoi ut 20/b fax:(36-1)-208-08-75 http://www.balabit.hu/ _______________________________________________ zorp mailing list zorp@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/zorp
participants (1)
-
Matt Hackett