O.K., I've worked through my "silent death" zorpctl problem -- thanks Szalay! The problem there was that the versions of libzorpll and in http://www.balabit.com/downloads/zorp/2.1/deb/ are mismatched (zorp was looking for an older library-file). I uninstalled my debs, and installed the ones in /zorp/2.0/deb. New problem: when I try to start Zorp, it still fails, but it writes the following (among other things) to /var/log/messages: logging "Binding to dummy interface failed, please create one and pass --autobind-ip parameter; autobind=''192.168.1.1'' " This is what instances.conf looks like: blue -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' purple -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' red -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' Question: does dummy0 need to be set up in /etc/networking/interfaces? Or is something else wrong here? Thanks, Mick /-------------------------------------------------\ | Michael D. (Mick) Bauer | | Hired Goon Specializing in Information Security | | Security Editor, Linux Journal | | Dir. of Value-Subtracted Svcs., Wiremonkeys.org | \-------------------------------------------------/
This is what instances.conf looks like:
blue -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' purple -v 5 -p /etc/zorp/policy.py -B '192.168.1.1' red -v 5 -p /etc/zorp/policy.py -B '192.168.1.1'
Question: does dummy0 need to be set up in /etc/networking/interfaces? Or is something else wrong here?
autobind ip should not be routable and nost a connected private network, like 1.2.3.4/32 we usually choose: auto dummy0 iface dummy0 inet static address 1.2.3.4 netmask 255.255.255.255 and in the instances.conf we use --autobind-ip 1.2.3.4 -- HÖLTZL Péter BalaBit IT Kft | Tel: +36 1 371-0540 | GnuPG Fingerprint: holtzl.peter@balabit.hu | Mobil: +36 20 366-9667 | 796B C9D3 E492 B006 C8B2 http://www.balabit.hu/ | Fax: +36 1 208-0875 | 4D1F 5320 28E3 9A1B 3FC6
That fixed it. Thanks! Mick Bauer
autobind ip should not be routable and nost a connected private network, like 1.2.3.4/32 we usually choose:
auto dummy0 iface dummy0 inet static address 1.2.3.4 netmask 255.255.255.255
and in the instances.conf we use --autobind-ip 1.2.3.4
-- HÖLTZL Péter
BalaBit IT Kft | Tel: +36 1 371-0540 | GnuPG Fingerprint: holtzl.peter@balabit.hu | Mobil: +36 20 366-9667 | 796B C9D3 E492 B006 C8B2 http://www.balabit.hu/ | Fax: +36 1 208-0875 | 4D1F 5320 28E3 9A1B 3FC6
_______________________________________________ zorp mailing list zorp@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/zorp
participants (2)
-
Michael D. (Mick) Bauer
-
Peter HOLTZL