Re: [leaf-user] Shorewall 1.4 - 2.0.9
At 15:34 25.10.2004 -0700, you wrote: ... Now if LEAF/Bering just had an easy way to upgrade packages Mhhh... actually there was a suggestion (and contribution) long time ago by Alex Rhomberg IIRC. Erich THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Shorewall 1.4 - 2.0.9
On Monday 25 October 2004 23:27, Erich Titl wrote: At 15:34 25.10.2004 -0700, you wrote: ... Now if LEAF/Bering just had an easy way to upgrade packages Mhhh... actually there was a suggestion (and contribution) long time ago by Alex Rhomberg IIRC. 20 minutes of searching on the LEAF site didn't find any information on upgrading; lot's of information about how to install and configure initially. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Upgrading packages (was Shorewall 1.4 - 2.0.9)
Tom Eastep wrote:
On Monday 25 October 2004 23:27, Erich Titl wrote:
At 15:34 25.10.2004 -0700, you wrote:
...
Now if LEAF/Bering just had an easy way to upgrade packages
Mhhh... actually there was a suggestion (and contribution) long time ago by
Alex Rhomberg IIRC.
20 minutes of searching on the LEAF site didn't find any information on
upgrading; lot's of information about how to install and configure initially.
It's *VERY* simple...just put in a new CD and reboot! :-)
Actually, I'm only slightly kidding...that's exactly how I upgrade my
prodution firewalls. The partial backup feature I added to Dachstein allows
configuration data to be stored seperately from the rest of the package.
Once the config data is seperated from the rest of the package, it's an easy
matter to upgrade the pacakge while keeping your current configuration (in
my case, just inserting a new CD and re-booting).
Users who aren't running with multiple package paths and using partial
backups can still upgrade a package, it just takes a bit of extra work. The
general idea is to use a partial backup to save your configuration, replace
the package, and restore your old configuration files.
Step-by-step instructions for one way to do this (assuming a conventional
single-floppy LEAF system) would be:
- Make a backup copy of your firewall disk ('NEW'). This is the disk you
will add the upgraded package(s) to.
- Format a floppy to use as a temporary location for your configuration
file(s) ('XFER'). This disk should have the same format as your firewall
disk (and could simply be another backup copy of your current firewall).
- Make sure you have a working copy of your existing firewall ('OLD') in a
safe place, that you *DO NOT* use durring this process. That way, if
anything goes wrong you can simply reboot off the OLD disk to get back to a
working configuration.
- Remove your current firewall configuration disk and replace it with the
XFER disk.
- Use the lrcfg backup menu to make a partial backup of the package(s) you
want to upgrade, being sure to backup the files to the XFER disk. From the
backup menu:
t e enter p enter
b package1 enter
b package2 enter
...
- Download and copy the package(s) you want to upgrade onto the NEW disk.
- Reboot your firewall using the NEW disk...at this point your upgraded
packages will have their default configuration.
- Mount the XFER disk (mount -t msdos /dev/fd0u1680 /mnt)
- CD to the root directory (cd /)
- Manually extract configuration data for each package you upgraded:
tar -xzvf /mnt/package1.lrp
tar -xavf /mnt/package2.lrp
...
- Unmount (umount /mnt) and remove the XFER disk
- Using lrcfg, do *FULL* backups of your upgraded packages.
- Reboot, verifying the firewall works as expected. Some configuration
files may need to be 'tweaked' to work properly with the upgraded package
binaries.
IMPORTANT: The new package file package.local can be used to fine-tune
which files are included (and excluded) from the partial backup (see the
Dachstein-CD README for details). If this file doesn't exist, the backup
scripts assume anything from the package.list file that resides in /etc or
/var/lib/lrpkg is part of the configuration data and is used to create the
partial backup. If shorewall puts anything in /etc that isn't a user
modified configuration file, a proper shorwall.local file should be created
prior to making the partial backup.
NOTE: It's obviously possible to do the above 'in-place', without using
multiple disks, and even without making a partial backup (ie: copy current
config files to /tmp, manually extract new package on top of current running
firewall, then copy or merge config data from /tmp and backup...or similar),
but anyone capable of that level of command line gymnastics is probably
doing it already, without needing detailed instructions! :)
--
Charles Steinkuehler
[EMAIL PROTECTED]
---
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Upgrading packages (was Shorewall 1.4 - 2.0.9)
Thanks, Charles I've included your response in the Shorewall Upgrade documentation. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] NIC Module?
Hi group, I was hoping to add a Kingston NIC to my Bering-uClibc 2.2 machine But before I screw anything up, does anybody know the correct NIC modules to load for this NIC? The exact model number is: KNE111TX TIA, Andrew --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_idU88alloc_id065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Shorewall 1.4 - 2.0.9
On Tue, 2004-10-26 at 07:24, Tom Eastep wrote: 20 minutes of searching on the LEAF site didn't find any information on upgrading; lot's of information about how to install and configure initially. Tom, Point taken. I'm still working on the new leaf website. Google string: site:leaf-project.org shorewall upgrade -- Mike Noyes mhnoyes at users.sourceforge.net http://sourceforge.net/users/mhnoyes/ SF.net Projects: ffl, leaf, phpwebsite, phpwebsite-comm, sitedocs --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Shorewall 1.4 - 2.0.9
On Tuesday 26 October 2004 12:52, Mike Noyes wrote: On Tue, 2004-10-26 at 07:24, Tom Eastep wrote: 20 minutes of searching on the LEAF site didn't find any information on upgrading; lot's of information about how to install and configure initially. Tom, Point taken. I'm still working on the new leaf website. Google string: site:leaf-project.org shorewall upgrade Mike, Is the search function on the LEAF site broken? a) When using Konqueror as my browser, I can't even enter a search string in the search form. b) Using another browser, shorewall upgrade yields no hits. c) upgrade gets a few hits but mostly announcements of new distro versions. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
