[zorp-hu] Re: [tproxy] tproxy 2.6.10+

Pásztor Lénárd Zoltán lenard.pasztor at wonderline.hu
Thu Jun 23 15:46:02 CEST 2005


             Szia!

# dpkg -l zorp
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: 
uppercase=bad)
||/ Name                  Version               Description
+++-=====================-=====================-==========================================================
ii  zorp                  2.0.9-9               An advanced protocol 
analyzing firewall

# /etc/init.d/zorp start
Starting Zorp Firewall Suite: reverse_http
Jun 23 15:35:42 hosting1 reverse_http[12144]: zorp version 2.0.9 starting up
Jun 23 15:35:42 hosting1 reverse_http[12146]: (Log thread): 
/usr/share/zorp/pylib/Zorp/Domain.py:123: FutureWarning: x<<y losing 
bits or changing sign will return a long in Python 2.4 and up

Es egy http keres utan:

Jun 23 15:36:16 test reverse_http[12144]: (zorp at test/tproxy_test): 
Starting service; name='tproxy_test'
Jun 23 15:36:16 test reverse_http[12144]: (zorp at test/tporxy_test:0): 
Starting proxy instance; client_fd='15', 
client_address='AF_INET(10.3.6.55:59855)', client_zone='Zone(site-net, 
10.3.0.0/16)', client_local='AF_INET(10.3.6.253:1200)'
Jun 23 15:36:16 test reverse_http[12144]: 
(zorp at test/tproxy_test:0/http): Proxy starting; 
class='ReverseHostHttpProxy', module='http'
Jun 23 15:36:16 test reverse_http[12146]: (Log thread): 
/usr/share/zorp/pylib/Zorp/Zone.py:578: FutureWarning: x<<y losing bits 
or changing sign will return a long in Python 2.4 and up
Jun 23 15:36:16 test reverse_http[12144]: 
(reverse_http at zorp@test/nosession): accept count; accepts='1'
Jun 23 15:36:16 test reverse_http[12211]: 
(zorp at test/tproxy_test:0/http): bind() failed; error='Cannot assign 
requested address'
Jun 23 15:36:16 test reverse_http[12211]: 
(zorp at test/tproxy_test:0/http): Server connection failure; 
server_address='AF_INET(10.21.10.1:80)', server_zone='Zone(www-test, 
21.0.0/16)', server_local='None'
Jun 23 15:36:16 test reverse_http[12211]: 
(zorp at test/tporxy_test:0/http): Proxy ending; 
class='ReverseHostHttpProxy', module='http'
Jun 23 15:36:16 test reverse_http[12211]: (zorp at test/tporxy_test:0): 
Ending proxy instance;
Jun 23 15:36:16 test reverse_http[12211]: 
(zorp at test/tporxy_test:0/http/client): accounting info; type='stream', 
duration='0', sent='858', received='392'

10.3.6.55 a kliens IP
10.3.6.253 a zorp tuzfal IP
10.21.10.1 a webszerver IP

A netfilter a :80-ra jovo csomagokat nyomja tproxy tablaban :1200-as 
portra, ahol a zorp figyel.

Additional information:
 Error establishing connection to cafeserver.wonderline.hu

Nem talaltam a logban olyan bejegyzest amit irtal. Lehet tul regi 
verziot hasznalok?


KOVACS Krisztian wrote:

>  Szervusz,
>
>2005-06-23, cs keltezéssel 14.53-kor Pásztor Lénárd Zoltán ezt írta:
>  
>
>>Seikerult vegul beizzitanom 2.6.10-el (teszt jelleggel).
>>A zorp proxy modul nem szolgalja ki az oldalt, a logban bind() 
>>failed;... uzenetet talalok.
>>Strace-el megneztem es a kliens IP-jet akarja bind-elni a gepen.
>>Gondolom ez is resze transzparens mukodest megoldo eljarasnak.
>>    
>>
>
>  Igen. Milyen verzioju zorp-pal probalod (ujabbak el sem indulnak
>autobind IP nelkul)? Illetve az lenne meg a kerdes, hogy amikor
>elinditod a Zorp-ot, akkor ir a logba valami ilyesmit:
>
>System dependant init; sysdep_tproxy='tproxy20'
>
>  Namarmost nalad ide a sysdep_tproxy-hoz mit ir?
>
>  
>



More information about the zorp-hu mailing list