Re: [leaf-user] How to set MAC address

Hi jrb Am 30.05.2017 um 14:06 schrieb Jean-Roch Blais: Hello Sadam, List, Le 29 mai 2017 à 12:32, sadam a écrit : Hello, I have leaf uClibc firewall. At home. With two net interfaces. So I have: iface eth0 inet dhcp and iface eth1 inet static. And I have two MAC

Re: [leaf-user] How to set MAC address

Hi Am 29.05.2017 um 12:32 schrieb sadam: Hello, I have leaf uClibc firewall. At home. With two net interfaces. So I have: iface eth0 inet dhcp and iface eth1 inet static. And I have two MAC numbers, of course. Let's say MAC1 and MAC2. After starting my machine i have: eth0 with MAC1 and

Re: [leaf-user] ntpd segfaulting (copied to leaf-devel)

Hi Bob (copying this to leaf-devel) Sorry, I was too fast, I did not look into the i386 code but the one in x86_64 Am 03.05.2017 um 20:03 schrieb Robert K Coffman Jr. -Info From Data Corp.: Eric, IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix the issue on i386 as

Re: [leaf-user] ntpd segfaulting (copied to leaf-devel)

Hi Bob (copying this to leaf-devel) Am 03.05.2017 um 20:03 schrieb Robert K Coffman Jr. -Info From Data Corp.: Eric, IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix the issue on i386 as well. I'm not really sure what to do with that information. Is it possible to

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi Jean-Roch Am 02.05.2017 um 21:47 schrieb Jean-Roch Blais: > Hello Erich, and List… > ... >> >> So it looks like the check is correct now >> >> cheers >> >> ET >> >> > This is great, thanks for showing/sharing how you tested this. This is good > teaching :-) ! and it works !!! You are most

Re: [leaf-user] ntpd segfaulting

Hi Bob Am 02.05.2017 um 17:52 schrieb Robert K Coffman Jr. -Info From Data Corp.: So now there have been a few releases between 5.1.3 and 6.0.2. It might be interesting to know if 5.2.8 still runs fine. It appears to be fine, with uClibc 0.9.33.2 and ntpd 4.2.8p7. I also loaded the current

Re: [leaf-user] ntpd segfaulting

Am 02.05.2017 um 16:31 schrieb Robert K Coffman Jr. -Info From Data Corp.: Did you verify that uclibc and/or ntpd had any changes between the two releases affected? I'm using the i686 release. If I run it under VMWare ESXi with two cores, it crashes. If I reduce the cores to one, it works

Re: [leaf-user] ntpd segfaulting

Hi Bob Am 02.05.2017 um 14:30 schrieb Robert K Coffman Jr. -Info From Data Corp.: ddrown https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554 - I isolated this code out of ntpd and verified it has a race condition under uclibc pthreads ddrown this looks like a

[leaf-user] upgrade experience

OK folks, here is the latest on upgrade The current version is broken due to a new function which was supposed to prevent a misleading error message. There is a fix for that on the git maint repository. So I jumped into the cold water and upgraded my sturdy old 5.2.2 alix to --latest, no

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi Jean-Roch As you observed, upgrade was broken with the check_wget_dependency function. A fix is available in git maint and my tests for wget have shown positive results. This is an old LEAF router with double radio which allows me to connect to a shore based WLAN network. SALT# cat

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi Jean-Roch Am 30.04.2017 um 02:00 schrieb Jean-Roch Blais: Hello Erich, Le 29 avr. 2017 à 17:49, Erich Titl <erich.t...@think.ch> a écrit : Hi Jean-Roch So it is either or... this is just to check if openssl (on a new system) or wget-ssl (on older systems) is ins

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi Jean-Roch Am 29.04.2017 um 19:03 schrieb Jean-Roch Blais: Hello kp, Le 29 avr. 2017 à 11:00, kp kirchdoerfer a écrit : Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais: Hello list, is there a reason why wget-ssl.lrp is missing from Buc 6.0.2

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi Jean-Roch Am 29.04.2017 um 19:03 schrieb Jean-Roch Blais: Hello kp, Le 29 avr. 2017 à 11:00, kp kirchdoerfer a écrit : Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais: Hello list, is there a reason why wget-ssl.lrp is missing from Buc 6.0.2

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

Hi for Am 29.04.2017 um 05:09 schrieb Jean-Roch Blais: Hello list, is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe others distributions. It is required to perform a webconf firmware upgrade…

Re: [leaf-user] software upgrade /tmp size ...

Hi Jean-Roch Am 24.04.2017 um 17:07 schrieb Jean-Roch Blais: > Hello Erich, > ... >> > > Ok, do you have any suggestion for a valid size, or we simply keep guessing > until it works…. :-) ! I don’t see any documentation on how to use “Backup > software image” in Webconf… I just don’t want to

Re: [leaf-user] software upgrade /tmp size ...

Hi Jean Roch Am 22.04.2017 um 06:33 schrieb Jean-Roch Blais: Hello Erich, Le 21 avr. 2017 à 14:36, Erich Titl <erich.t...@think.ch> a écrit : Hi Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais: Hello list, trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory)

Re: [leaf-user] software upgrade /tmp size ...

Hi Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais: > Hello list, > > trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I get > this strange message in syslog … : > > Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary > storage available for > Apr 20

Re: [leaf-user] logrotate

Hi Am 05.04.2017 um 07:26 schrieb Otto Halák - TeleLarm: > Hi, > is there some kind of "postrotate" option in lrp.conf? > SMSTools3 needs to be reloaded after log file rotation since it still > writes to previous old logfile (smsd.log.1). You will need the logrotate.lrp package for such things,

Re: [leaf-user] saving dnsmasq.leases on reboot

Hi Bob Am 26.01.2017 um 16:09 schrieb Bob von Knobloch: On 26/01/17 14:48, Erich Titl wrote: Hi ... cheers Erich Look at the dnsmasq option (from the manpage): -K, --dhcp-authoritative Should be set when dnsmasq is definitely the only DHCP server on a network. For DHCPv4

Re: [leaf-user] saving dnsmasq.leases on reboot

Hi Am 26.01.2017 um 14:18 schrieb David M Brooke: ... To Eric’s point from before, using Static Leases (via dhcp-host= in /etc/dnsmasq.conf) ensures a device is given the same IP address consistently, but dnsmasq doesn’t seem to add the host to DNS unless there’s an *active* DHCP lease in

Re: [leaf-user] saving dnsmasq.leases on reboot

Hi Am 24.01.2017 um 22:23 schrieb David M Brooke: I’ve also thought about preserving the contents of dnsmasq,leases. Sometimes I scp that file to another machine before a BuC reboot then scp it back again (and “svi dnsmasq restart”) afterwards. It’s not a huge issue to lose the DHCP leases

Re: [leaf-user] saving dnsmasq.leases on reboot

Hi Am 24.01.2017 um 15:35 schrieb John Sager: > I think he wants to save it before every reboot rather than manually. In the end that is the same, you need to know how to save the config. You could do that every time a new lease is granted but I think that this would be a pretty heavy

Re: [leaf-user] saving dnsmasq.leases on reboot

Hi Am 23.01.2017 um 22:46 schrieb Mark Berndt: > On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote: >> Am 19.01.2017 um 02:24 schrieb Mark Berndt: >>> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost. >>> >>> I added it to my local config so

Re: [leaf-user] saving dnsmasq.leases on reboot

Am 19.01.2017 um 02:24 schrieb Mark Berndt: > When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost. > > I added it to my local config so it is saved, but of course this only happens > when save the config. > > What is the best way to preserve this information between reboots? The

Re: [leaf-user] Module loading issues in 6.0.2-rc1

Hi John Am 18.01.2017 um 20:05 schrieb John Sager: > No, I am using the vanilla iptables package and the iptables script there > does a iptables-restore as part of its 'start' functionality. So it needs > the modules to be available at that point. I'll look at a patch to fix it. I > don't want to

Re: [leaf-user] Module loading issues in 6.0.2-rc1 (copy to the list)

Hi John Am 18.01.2017 um 10:15 schrieb John Sager: > I'm trying to get 6.0.2-rc1 working on a PC Engines apu2c2 but there are > problems with loading modules in some cases. I note that the moddb stuff has > been removed and all module loading is now done from modules.sqfs mounted to >

Re: [leaf-user] [closed] Re: automatic upgrade from 5.2.4

Am 03.01.2017 um 08:07 schrieb Andrew: > Not harder than grub :) Really, is it documented reasonably somewhere? If so I might be inclined to move back to it. In the past syslinux was very awkward about multiboot and falling back from an unsuccesful boot, but then. So I dropped it for me, no

Re: [leaf-user] [closed] Re: automatic upgrade from 5.2.4

Hi Boris Am 27.12.2016 um 18:32 schrieb Boris: Hej KP and Andrew, thank you both very much! Finally, I decided to make some steps in one: 1. Bring the 6.0.1 to work. 2. Make my Alix-Box multibootable 2a. Make one boot-image production and another back and a third 5.2.x 3. prozess apkg -u

Re: [leaf-user] Installing Bering-uClibc on a compact flash for use in Soekris Net4501

Hi Ed Am 06.12.2016 um 22:56 schrieb edflecko .: > Erich, > Is this what your referring to: http://leaf.sourceforge.net/doc/bugrub.html To be more explicit I am using a small (1MB) partition to just hold the boot loader, the boot entries refer to other partitions roughly 32 MB which hold all

Re: [leaf-user] Installing Bering-uClibc on a compact flash for use in Soekris Net4501

Am 06.12.2016 um 22:56 schrieb edflecko .: > Erich, > Is this what your referring to: http://leaf.sourceforge.net/doc/bugrub.html Yes cheers Erich -- Developer Access Program for Intel Xeon Phi Processors Access to

Re: [leaf-user] Installing Bering-uClibc on a compact flash for use in Soekris Net4501

Hi Am 06.12.2016 um 22:11 schrieb edflecko .: > Thank you both! > > Erich: I like you're idea about multiple partitions...that's very clever! Been doing that for many years, but you best use another bootloader than syslinux which allows easier installation of multiple operating systems and

Re: [leaf-user] Installing Bering-uClibc on a compact flash for use in Soekris Net4501

Hi Ed Am 06.12.2016 um 21:34 schrieb edflecko .: > My CF is 8Gb - should I create a 1Gb primary partition and install to that > or just leave the 8Gb single partition as is? I always suggest to make at least 3 partitions, one to boot from and the others for at least two instances of LEAF. Of

Re: [leaf-user] dnsmasq does not start on boot with Bering-uClibc 6.0.0

Hi Sven Am 27.11.2016 um 14:43 schrieb Sven Kirmess: Nov 27 14:25:32 firewall dnsmasq[6248]: cannot create ICMPv6 socket: Address family not supported by protocol Nov 27 14:25:32 firewall dnsmasq[6248]: FAILED to start up And save the modified file in the config: # echo

Re: [leaf-user] CLAMPMSS=Yes requires TCPMSS Target in your kernel and iptables

Hi Sven Am 26.11.2016 um 21:42 schrieb Sven Kirmess: The same problem exists with shorewall6! shorewall6 cannot be started on a freshly installed Bering-uClibc 6.0.0! You have to mount_modules shorewall6 restart umount_modules Saving the config and rebooting solves the problem but this is a

Re: [leaf-user] CLAMPMSS=Yes requires TCPMSS Target in your kernel and iptables

Hi Sven Am 23.11.201ve yo6 um 22:59 schrieb Sven Kirmess: As Erich pointed out, it seems to not load the module during boot. (That's again on a fresh system without a configdb.lrp) firewall# shorewall show capabilities | grep -i tcpmss TCPMSS Match (TCPMSS_MATCH): Not available TCPMSS

Re: [leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC) (update)

Hi Am 24.09.2016 um 14:46 schrieb n22e113: On 9/24/2016 06:05, Erich Titl wrote: Am 24.09.2016 um 09:06 schrieb Andrew: On 24.09.2016 04:22, Erich Titl wrote: I never understood why the standard resolver file was not used, but this is all personal preference. If dhcpcd would write to /etc

Re: [leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC) (update)

Am 24.09.2016 um 09:06 schrieb Andrew: > Hi. > > On 24.09.2016 04:22, Erich Titl wrote: >> I never understood why the standard resolver >> file was not used, but this is all personal preference. If dhcpcd would >> write to /etc/resolv.conf and dnsmasq would read f

Re: [leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC) (update)

Am 23.09.2016 um 20:43 schrieb Jean-Roch Blais: > >> Le 23 sept. 2016 à 07:36, Erich Titl <erich.t...@think.ch> a écrit : >> >> Am 23.09.2016 um 10:13 schrieb Erich Titl: >>> Am 23.09.2016 um 00:38 schrieb Jean-Roch Blais: >>>> >> ... >&g

Re: [leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC) (update)

Am 23.09.2016 um 10:13 schrieb Erich Titl: > Am 23.09.2016 um 00:38 schrieb Jean-Roch Blais: >> ... > > As I said previously a daemon process _should_ watch its dependencies, > often they do not and I don't know if dnsmasq does. The drawback of the > bazaar model often i

[leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC)

Am 23.09.2016 um 00:38 schrieb Jean-Roch Blais: > ...> > Erich, I still would like to know, what we should do about the dnsmasq/dhcpcd > apparent dichotomy… Is that problem important enough to justify going > further, like contacting the author, or fixing it on our own ? Just your > thoughts

Re: [leaf-user] watchdog timer on BUC

HI Am 22.09.2016 um 20:20 schrieb Jean-Roch Blais: > Hello Andrew, .. > > > Ok I gladly agree to this, since this means there is no need to devise an > external watchdog timer, right ? There is a lot of people who don’t know that > then… :-( > My previous motherboard would not reboot when it

Re: [leaf-user] watchdog timer on BUC

> Since then I replaced it with another one running BUC 5.2.5, as one can > probably tell from my dhcpcd/dnsmasq adventure in my previous e-mails to the > list… > > This made me wonder how the watchdog timer was working on BUC. I think Erich > Titl mentioned in some previou

Re: [leaf-user] dhcpcd broken on Buc 5.2.5 and probably on 5.2.*

Hi Am 20.09.2016 um 08:53 schrieb Andrew: > Hi. ... >> I _believe_ the behaviour of dnsmasq is the problem here. The timing of >> dhcp is not deterministic and whoever relies on data from a different >> job needs to check the status of this prerequisite. > And even more, I think that it'll be a

Re: [leaf-user] dhcpcd broken on Buc 5.2.5 and probably on 5.2.*

Hi Jean-Roch Am 19.09.2016 um 19:42 schrieb Jean-Roch Blais: > Hello Erich, > > thank's for your answer, I commented out background in dhcpcd.conf and voila > ! it works as before, great ! , here is the daemon.log: (I changed my IP > address .111) Very well. We have to think about

Re: [leaf-user] dhcpcd broken on Buc 5.2.5 and probably on 5.2.*

Hi Jean-Roch Am 18.09.2016 um 22:55 schrieb Jean-Roch Blais: > Hello list, sorry for the hard to read previous post ... > ... > > I can also use the original BUC 5.2.5 dhcpcd.lrp but I have to add in > /etc/default/local.start: > > sleep 5 > dnsmasq > > and it works again ! > > facinating

Re: [leaf-user] Captive portal on LEAF Bering

Hi Graziano Am 16.09.2016 um 15:15 schrieb Graziano Brioschi: > Hi list, > > is there someone that has realized a capitive portal based on leaf? Is > there some packages like coovachilli or sililar on bering uclibc? I am afraid you will have to bite the bullet yourself. It should not be too

Re: [leaf-user] More/Many Missing Drivers in 5.2.x Series?!

Am 05.09.2016 um 19:11 schrieb kp kirchdoerfer: > But it should work there also. > > I'll look into the issues; some are really missing, others like ext2/3 are > replaced by a common driver like ext4 supporting ext2 and ext3 as well, > others > are provided AFAIK (hwmon, i2c), though special

Re: [leaf-user] problem with upgrade 5.2.6-rc1 -> 5.2.6

Hi KP Am 21.06.2016 um 23:55 schrieb kp kirchdoerfer: Hi; ... This is bad, well you don't have enough temprorary storage to extract astmoh, whatever that package is. If you have enough memory, try to grow /tmp Ich habe versucht das zu patchende Konfigurationsfile selektiv aus dem

Re: [leaf-user] problem with upgrade 5.2.6-rc1 -> 5.2.6

Hi Berndt Am 21.06.2016 um 11:50 schrieb Mark Berndt: there is plenty of free space in /tmp, but the upgrade script fails: firewall# df Filesystem 1K-blocks Used Available Use% Mounted on tmpfs 524288 18204506084 3% /tmp tmpfs 131072

Re: [leaf-user] New 6.0.0 alpha

Hi pgm Am 01.06.2016 um 23:28 schrieb pgm: I just installed the new alpha version and used my configdb.lrp from a working 5.1.4 installation. On first boot Shorewall would not start with an iptables-restore error. On second boot everything worked perfectly. I then made the mistake of running

Re: [leaf-user] problem booting on soekris net5501-70

Ciao Graziano Am 06.05.2016 um 11:23 schrieb Graziano Brioschi: Hi Erik, are there some different selections about CPU settings in kernel config files with the 5.2.5 version? I tried to find out, but this is rather tedious with git and the way the config files are named right now.

Re: [leaf-user] problem booting on soekris net5501-70

Hi Graziano Am 05.05.2016 um 14:47 schrieb Graziano Brioschi: Hi everyone, today I have found a booting problem on a soekris net5501 using LEAF version 5.2.5 for geode CPU (Bering-uClibc_5.2.5_geode_syslinux_serial115200.tar.gz). after the hardware POST, on serial console i can see (after tha

Re: [leaf-user] reboot web option - minor point

Hi Marko Am 20.04.2016 um 06:14 schrieb Mark Berndt: > this is a very minor point, but I would expect the reboot menu option to > offer me a choice, reboot on not. Interesting idea, probably triggered by M$ behaviour. When I see these so called security questions pop up, I am always wondering

Re: [leaf-user] Update(grade) to Bering 5.x

Am 11.04.2016 um 02:57 schrieb n22e113: > On 4/9/2016 05:51, kp kirchdoerfer wrote: >> But why do I invest time as Linux user to explain other Linux users ancient >> Windows filesystem limitations? I could have used Windows if I'm interested >> in >> such problems. I use ext4 on my routers

Re: [leaf-user] Update(grade) to Bering 5.x

Hi Bob Am 09.04.2016 12:40, schrieb Bob von Knobloch: > On 09/04/16 11:51, kp kirchdoerfer wrote: >> We have long filenames on the iso image (>8.3). In FAT16 the root-dir-entries >> may run out of space because of that (root-dir-entries are also used to >> store >> long filenames) . That's why

Re: [leaf-user] Update(grade) to Bering 5.x

Am 08.04.2016 09:47, schrieb Bob von Knobloch: > On 08/04/16 11:29, Erich Titl wrote: >> Did you copy the files on the LEAF box or did you use a CF adapter on >> another linux system. In any case syslog should report something. The >> symptoms you describe might point to a p

Re: [leaf-user] Update(grade) to Bering 5.x

Hi John Am 08.04.2016 07:39, schrieb John Sager: > I have had problems on Linux copying to CF cards - stopping after about > 80Mbyte. I solved it by creating a file of the same size as the partition, > creating a FAT filesystem on it, mounting it via /dev/loop0 & copying all > the files. Then I

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Am 30.03.2016 um 17:07 schrieb Bob von Knobloch: > On 30/03/16 16:43, Erich Titl wrote: ... > > _AND_ I have found it! An extra space after "address 192.168.142.1 ". > > I use 'vi' and on all my 'normal' machines, I have set it so that it > highlights whitespace at

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Am 30.03.2016 um 16:23 schrieb Bob von Knobloch: > On 30/03/16 16:08, Erich Titl wrote: ... >> This should not be necessary, but you can start commenting stuff in leaf.cfg > OK, I had already tried this (in case of any non-printing chars hidden > in the file. Nevertheless I've done

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Am 30.03.2016 um 15:54 schrieb Bob von Knobloch: > Perhaps a clue, > > I made a null-modem cable and captured the boot sequence. > With all 3 eths connected to switches (to make link appear). > The boot-up shows: > > ===SNIP= > Setting

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 30.03.2016 um 15:54 schrieb Bob von Knobloch: > Perhaps a clue, > ... > > I don't know where the error message originates, but it seems to point > at misconfiguration of eth0 (i.e. my problem). It looks like it, but it is not obvious I would try first to delete the whole eth0

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 29.03.2016 um 11:17 schrieb Bob von Knobloch: > KP, Erich, Bodo, > > Something weird with the list s/w, I suddenly got 8 of my list postings > appearing in one hit. > From the replies you are giving me, I have the impression that they are > being delayed somehow. > e.g. Erich asked

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Am 29.03.2016 um 10:42 schrieb Bob von Knobloch: > On 29/03/16 10:31, Erich Titl wrote: >> So this proves that the driver is correctly installed. >> You can connect to the internal interfaces. >> What does ip addr / ip link show? > > I don't follow this. > >

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 29.03.2016 um 10:17 schrieb Bob von Knobloch: > On 29/03/16 10:07, Erich Titl wrote: >> Bad cable, speed detection, dhcp? Do you have another (working) ethernet >> interface? > > Yep, > > eth1 & eth2 are fine. > Cable not even needed, not c

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Am 29.03.2016 um 09:58 schrieb Bob von Knobloch: > On 29/03/16 09:52, Bodo Meissner wrote:... > > I agree, except that eth0 shows furious activity when connected to a > switch, although no packets can be detected (how the switch might detect > this is another unknown, of course). This makes me

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 29.03.2016 um 09:33 schrieb Bob von Knobloch: > On 29/03/16 09:13, Erich Titl wrote: ...> > Hmm, some misunderstanding here. > Ignoring any other devices or networks (i.e. the port "eth0" is only > connected to an empty switch (to give it link) OR not connec

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 29.03.2016 um 09:09 schrieb Bob von Knobloch: > On 28/03/16 23:33, Bodo Meissner wrote: >> Am 26.03.2016 um 19:52 schrieb Bob von Knobloch: >> >>> My LEAF box >> [...] >>> (I'll put it behind the Fritz Box to do proper firewalling). >> [...] >>> iface eth0 inet static >>> >>>

Re: [leaf-user] Fwd: Re: Can't reconfigure my LEAF-WRAP box

Hi Bob Am 28.03.2016 um 16:10 schrieb Bob von Knobloch: > On 28/03/16 15:42, kp kirchdoerfer wrote: >> HI Bob; ...> > > You are right in your case, of course, BUT I have a 12 phone ISDN > exchange here (my wife's Veterinary practice) which has all analogue > phones wired to it and to have to

Re: [leaf-user] Fwd: Re: Can't reconfigure my LEAF-WRAP box

Hi Bob Am 27.03.2016 um 21:45 schrieb Bob von Knobloch: > > On 27/03/16 15:08, David M Brooke wrote: >> Hi Bob, >> >> Not sure if it’s enough to explain your symptoms, but I don’t think it’s >> correct to have the Gateway set the same as your Address. >> >> davidMbrooke > > Thanks David, >

Re: [leaf-user] some problems with the upgrade script

Am 27.03.2016 um 18:14 schrieb kp kirchdoerfer: > Hi Erich; > ... >>> in /usr/sbin/upgrade solves the problem: >> It looks like sourceforg dropped the redirect support. > > Not shure; as he said the script from the CLI works, as it does on my router. > > > + wget --no-check-certificate -O

Re: [leaf-user] some problems with the upgrade script

Hi John Am 26.03.2016 um 23:22 schrieb John Sager: The busybox distribution includes two versions of ssl_helper. One uses a library from matrixssl, and the other from wolfssl. However neither will build automatically with busybox. Some work would be needed to integrate a build of ssl_helper and

Re: [leaf-user] some problems with the upgrade script

Hi Mark Am 27.03.2016 um 06:13 schrieb Mark Berndt: No luck with the web interface, running ugrgrade from the command line shows: firewall# upgrade -vvv -c upgrade: opening ports 80 and 443 for upgrade upgrade: Installed version is 5.2.5-rc2 upgrade: retrieve

Re: [leaf-user] Can't reconfigure my LEAF-WRAP box

Hi Bob Am 26.03.2016 um 19:52 schrieb Bob von Knobloch: Hi, I'm sure its me missing something, but I'll ask anyway. My LEAF box is currently configured for PPPOE on its eth0. I don't want this any more (having to go to VOIP necessitates using a Fritz Box as my ISP interface (to get ISDN S0) and

Re: [leaf-user] some problems with the upgrade script

Hi Marco thank you for the feedback Am 26.03.2016 um 12:09 schrieb Mark Berndt: > Hello, I'm on 5.2.4 rev 1 and trying to use the upgrade script. > > I have tried both the busybox wget and also the wget.lrp package, both fail. > Here is the output of the upgrade with wget from wget.lrp:

Re: [leaf-user] Bering 5.2.5 rc2

Hi Victor Thank you for the feedback. For us the worst is not to get any. Am 26.03.2016 um 07:02 schrieb Victor McAllister: > Thank you to the developers. I have not tried the upgrade. I just use > the old configdb.lrp and so far everything works. You probably did manually what the upgrade

[leaf-user] Release 5.2.5-rc2

HI everybody The Bering uClibc team is proud to announce the release of the second release candidate for version 5.2.5. As usual there are a number of images for download and starting with release 5.2.3 we have web access to individual packages at

Re: [leaf-user] tc filter 'action connmark' doesn't work

Am 18.02.2016 um 23:44 schrieb Andrew: > Hi. > > Yes, I think that we should. > > About rate estimator - > http://comments.gmane.org/gmane.linux.network/272199 description (IMHO > it should be disabled by default); and IMHO we should add also > htb_hysteresis parameter here. maybe it needs a

Re: [leaf-user] tc filter 'action connmark' doesn't work

Hi Andrew Am 17.02.2016 um 19:04 schrieb Andrew: > Or add sch_htb option to modprobe.conf (this is better and more common way) Shouldn't we add this to /etc/modprobe.d/sch_htp.conf cheers ET -- Site24x7 APM Insight:

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Hi Boris Am 15.02.2016 um 14:00 schrieb Boris: > Thank you Erich and Mark, > > ...>> > > No. I use the geode version for my alix box. But yes, I use easyrsa. > > [Snip] > >> >> Indeed there does not appear to be a build-key in the package, and I >> _believe_ the syntax may have changed.

Re: [leaf-user] successful migration - thanks!

Hi Boris Am 13.02.2016 um 11:02 schrieb Boris: > Hej list, > > > yesterday I switched my Bering 3.x to 5.2.4 by new intallation on my > alix box. Since I am quite comfortable with leaf I was through it within > a few hours and it works good so far. > Thanks to everybody working on this!! > >

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Hi Am 13.02.2016 um 22:17 schrieb Boris: > Hej all, > > > I hope to get some help with openvpn in Bering-uClibc 5.2.4: > Following the doc > "http://bering-uclibc.zetam.org/wiki/Bering-uClibc_5.x_-_User_Guide_-_Advanced_Topics_-_Setting_Up_a_Virtual_Private_Network; > I'm trying build-ca but

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Hi Boris Am 14.02.2016 um 00:46 schrieb Boris: > Am 13.02.2016 um 22:40 schrieb Erich Titl: ... > > thanks for caring! > > Yes, a typo, but only in the mail > > Writing build-k and pressing doesn't complete the line, so there's > no build-key-server and no

[leaf-user] upgrade tool

Hi Folks Sourceforge redirects http requests to https right now. This is annoying for users running the upgrade script, as it requires wget with ssl support. The busybox wget applet is sufficient to handle this, but it requires the openssl package to be installed. SALT# /bin/busybox wget

[leaf-user] Issues upgrading your LEAF router using the upgrade tool

Hello everyone Those of you who experienced problems using the upgrade tool to get your LEAF box up to date may have experienced problems in the past few days. The problems stem from Sourceforge starting to enforce https for file download. Sourceforge is in a transitory phase, so they do not

Re: [leaf-user] openvpnz 2.3.9

Hi Fred Am 18.01.2016 um 14:48 schrieb Frederick E. Stevens: > Hi Erich, > > Yes, I can test it on my router. I've been building my own packages as > I am using an older AMD-K6III for my router. I had to build a custom > kernel with CPU optimizations for K6/K6II/K6III. i486 versions crash

Re: [leaf-user] Upgrade 5.2.3 to 5.2.4

Hi Sven Am 08.02.2016 um 23:59 schrieb Sven Kirmess: > I'm trying to upgrade Bering-uClibc from 5.2.3 to 5.2.4. > >> firewall# more /etc/motd >> LEAF Bering-uClibc 5.2.3 Rev 1 uClibc 0.9.33.2 at firewall >> Linux 4.1.15-x86_64 #1 SMP Tue Dec 29 00:47:12 CET 2015 > > On my system it tries to

Re: [leaf-user] How do you archive shorewall logs

Hi Sven Am 07.02.2016 um 16:24 schrieb Sven Kirmess: > My current netfilter firewall produces about 80'000 lines of log per day. Don't you think that is a bit overdoing it. I would not call this a firewall but a sniffer, as you probably log every connection attempt. cheers ET

Re: [leaf-user] How do you archive shorewall logs

Am 26.01.2016 um 09:50 schrieb Andrew: > You can look on ebay, or on chinese aliexpress. Low-capacity SSDs are > enough cheap. > > One thing - be careful about SSD controller and memory type. Sandforce > may not always work OK for a long time. And TLC memory is slightly worse > than MLC. We

Re: [leaf-user] How do you archive shorewall logs

Hi Sven Am 25.01.2016 um 21:12 schrieb Sven Kirmess: ...> > On Wed, Jan 20, 2016 at 11:37 PM, Erich Titl <erich.t...@think.ch> wrote: > >> >> Why not add a ssd for logs? >> > > I think that's the best solution. There are 30 GB mSATA SSDs that cost &g

Re: [leaf-user] How do you archive shorewall logs

Hi Sven Am 20.01.2016 um 18:32 schrieb Sven Kirmess: > On Tue, Jan 19, 2016 at 11:03 PM, Erich Titl <erich.t...@think.ch> wrote: > >> >>> rsyslog has RELP to reliable transfer syslog messages to a remote server, >>> but Bering-uClibc uses syslog-ng. If I under

Re: [leaf-user] How do you archive shorewall logs

Hi Sven Am 20.01.2016 um 21:34 schrieb Sven Kirmess: > On Wed, Jan 20, 2016 at 6:51 PM, Erich Titl <erich.t...@think.ch> wrote: > >> >> I see, you want reliable central logging not archiving logs. >> > > I'm looking for a solution to preserve the log f

Re: [leaf-user] How do you archive shorewall logs

Hi Sven Am 19.01.2016 um 20:41 schrieb Sven Kirmess: > What's the recommended way to store the shorewall logs in a way that > survives a reboot? None :-( > > I assume mounting a USB stick to store them on it would wear the stick out > within months. And external USB disks aren't made for 24/7

Re: [leaf-user] openvpnz 2.3.9

Hi Fred Am 18.01.2016 um 15:32 schrieb Frederick E. Stevens: > Erich, > > It seems to be working. Here is the daemon.log from my router: Great, I added the change to maint cheers ET -- Site24x7 APM Insight: Get

[leaf-user] openvpnz 2.3.9

Hi Fred Am 18.01.2016 um 13:23 schrieb Fred: > > ... > Hi, > > I've been trying to use the new openvpnz.lrp package but it fails with > the message that /usr/sbin/ip can't be found (5.2.3 version of > Bering-uClibc). I did

Re: [leaf-user] openvpnz 2.3.9

Hi Fred Am 18.01.2016 um 14:48 schrieb Frederick E. Stevens: > Hi Erich, > > Yes, I can test it on my router. I've been building my own packages as > I am using an older AMD-K6III for my router. I had to build a custom > kernel with CPU optimizations for K6/K6II/K6III. i486 versions crash

Re: [leaf-user] openvpnz 2.3.9

Am 18.01.2016 um 15:02 schrieb Frederick E. Stevens: > Yes, just attach to email. I am using openvpnz but can test both > openvpn and openvpnz. Will this be in git eventually? Sure, that is what git is for. cheers ET

Re: [leaf-user] openvpnz 2.3.9

Hi Fred Am 18.01.2016 um 15:50 schrieb Frederick E. Stevens: > Erich, > > I tried the new build. Does this cause difficulties for the lzo version > (from log/buildtoollog)? > > configure: WARNING: unrecognized options: --with-ssl-headers, > --with-ssl-lib, --with-lzo-headers, --with-lzo-lib,

Re: [leaf-user] usb wifi adaptor (Atheros) - solved

Hi Mark Am 16.12.2015 um 11:51 schrieb Mark Berndt: > add ath9k_htc & usbnet to modules file > download firmware > from http://linuxwireless.org/download/htc_fw/1.3/[1] > put the firmware in /lib/firmware Sorry, it is late for a reply, would you suggest we place this firmware in the firmware

Re: [leaf-user] 5.2.3 works great

Hi Timothy Am 02.01.2016 um 21:25 schrieb Timothy Wegner: > I upgraded a Soekris net6501 box used as a router with > Bering-uClibc_5.2.3_x86_64_syslinux_vga.tar.gz (configured as serial) and > it worked great. I had also tried rc1 (I know the team wants testing of > release candidates) but alas

Re: [leaf-user] Unable to upgrade from LEAF Bering-uClibc 5.2 to 5.2.1

Am 23.11.2015 um 19:40 schrieb Robert K Coffman Jr. -Info From Data Corp.: > > On 11/21/2015 1:14 PM, Erich Titl wrote: >> We hope that >> from this release the box will be able to upgrade itself > > This is the best news I've had all year! Christmas is coming :-) We

  1   2   3   4   5   6   7   8   9   10   >