Re: [leaf-user] prevent Iot from the net

2016-11-06 Thread n22e113
On 11/5/2016 20:58, Jean-Roch Blais wrote: > Here I’m using Buc 5.2.7 x86_64 on an Asus mobo P5GC-MX and Power supply, > pulled out of the PC tower, it’s in the basement, no one sees it :-) ! > Looks like that: http://imgur.com/38JiUW9 Hey, JRB, I used to do that too! But that contraption would

Re: [leaf-user] dhcpd/dnsmasq (was Re: watchdog timer on BUC) (update)

2016-09-24 Thread n22e113
On 9/24/2016 06:05, Erich Titl wrote: > Am 24.09.2016 um 09:06 schrieb Andrew: >> On 24.09.2016 04:22, Erich Titl wrote: >>> I never understood why the standard resolver >>> file was not used, but this is all personal preference. If dhcpcd would >>> write to /etc/resolv.conf and dnsmasq would read

[leaf-user] Leaf - Busybox Scripting without wget or curl

2016-05-18 Thread n22e113
Hello, Just wondering without wget/curl, what would be the best practice to send a URL within a local LAN (ie 192.168.1.0/24) from the Leaf firewall in a script or a cron job? Example URL: http://admin:passwd@192.168.1.2/run.php

Re: [leaf-user] Update(grade) to Bering 5.x

2016-04-10 Thread n22e113
On 4/9/2016 05:51, kp kirchdoerfer wrote: > But why do I invest time as Linux user to explain other Linux users ancient > Windows filesystem limitations? I could have used Windows if I'm interested > in > such problems. I use ext4 on my routers instead. > Just to report that by using alix2d3,

Re: [leaf-user] Deutsche Telekom VOIP

2016-02-29 Thread n22e113
On 2/28/2016 09:30, Bob von Knobloch wrote: > I've tried, without success, to find out what ports/protocols (shorewall > rules) I need to add to LEAF for Telekom's VOIP. Hello, for shorewall (v4.5.20) try: /etc/shorewall/shorewall.conf DISABLE_IPV6=Yes #default LOAD_HELPERS_ONLY=No #default

Re: [leaf-user] BuC 5_2 dhcpcd not installing ipv4 address

2015-10-07 Thread n22e113
On 9/29/2015 09:03, Erich Titl wrote: > Replacing dhcpcd.lrp with a previous version fixed the problem. > It looks like dhcpcd.lrp is broken on 5_2 > For file=Bering-uClibc_5.2_geode_syslinux_serial115200.tar.gz, replacing dhcpcd.lrp from

Re: [leaf-user] BuC 5_2 dhcpcd not installing ipv4 address

2015-09-29 Thread n22e113
On 9/29/2015 09:03, Erich Titl wrote: > Replacing dhcpcd.lrp with a previous version fixed the problem. > It looks like dhcpcd.lrp is broken on 5_2 > Test with File=Bering-uClibc_5.2_x86_64_syslinux_vga.tar.gz It works for me so far with left.cfg: LRP="root license local dhcpcd bbntpd shorwall

Re: [leaf-user] Leaf 5.2 + alix2d3 Missing ext[23].ko.gz

2015-09-28 Thread n22e113
On 9/28/2015 05:43, Andrew wrote: > Hi. > ext4 module should support ext2/ext3 fs. > It did work (quote from /var/log/kern.log): EXT4-fs (sda2): mounting ext2 file system using the ext4 subsystem EXT4-fs (sda2): mounted filesystem without journal. Opts: (null) # lsmod | grep ext ext4 502292 0 -

[leaf-user] Leaf 5.2 + alix2d3 Missing ext[23].ko.gz

2015-09-27 Thread n22e113
Hi, Make sure to watch the Blood moon! Thanks Leaf for v5.2. However, modules ext2 & ext3 are missing in modules.tgz? Is this intentional? The reason I am asking is that I am still using a CF card to store Leaf and ext2 as a file system (without journal & rw) works better than ext4. Cheers,

Re: [leaf-user] Missing All 5.1.5 Files

2015-06-27 Thread n22e113
On 6/25/2015 15:23, n22e113 wrote: Thanks! A little busy right now but will test again in due course (may be this weekend). Once again, thanks! Tested with Bering-uClibc_5.1.5_i686_syslinux_vga.tar.gz. Everything seems to work but still doesn't have shorewall.log files. From leaf.cfg: LRP

Re: [leaf-user] Missing All 5.1.5 Files

2015-06-25 Thread n22e113
On 6/25/2015 13:20, kp kirchdoerfer wrote: thx a lot for letting us know this issue. Indeed it didn't work; I've deleted the old files, uploaded again and tested suceessfully downloading one of the images- should work now. Hi, kp, Thanks! A little busy right now but will test again in due

[leaf-user] Missing All 5.1.5 Files

2015-06-24 Thread n22e113
Hello, Cannot download any of the v5.1.5 from here: http://sourceforge.net/projects/leaf/files/ Many thanks! Cheers! Kwon -- Monitor 25 network devices or servers for free with OpManager! OpManager is web-based network

[leaf-user] No shorewall.log Out-of-the-Box for V5.1.[1234]

2015-06-22 Thread n22e113
Hello, all, Testing with Bering-uClibc_5.1.x_i686_syslinux_vga.tar.gz. Out of the box v5.1.x (x=1,2,3,4) did not create /var/log/shorewall.log? I had followed kp's instructions on 12/10/2014 (quote): # grep NFLOG /etc/shorewall/* /etc/shorewall/modules.xtables:loadmodule xt_NFLOG

[leaf-user] Leaf Bering uClibc 5.1.3 - openvpnz

2015-06-19 Thread n22e113
Hello, Great job with the new documentation website: http://bering-uclibc.zetam.org/wiki/Main_Page Q. Any HowTo on openvpnz? Cheers! -- leaf-user

Re: [leaf-user] Leaf Bering uClibc 5.1.3 - openvpnz

2015-06-19 Thread n22e113
On 6/19/2015 21:54, Mark Berndt wrote: It is pretty straightforward, you need the EasyRSA package to generate the keys. Follow the instructions on your EasyRSA leaf firewall website. The only gotcha is that pkitool is not on the path. I made symlink, but you could add it to the path or

Re: [leaf-user] temporarily allowing connections

2015-03-05 Thread n22e113
I need to temporarily allow HTTP connections from my shorewall based LEAF box, preferrably without having to touch the shorewall files and be able to stop this functionality again. I looked a bit at the very extensive shorewall docs, but nothing immediately caught my eyes. It would be nice

Re: [leaf-user] alix2d3 + v5.1.{1,2} Intermittent Boots

2015-02-26 Thread n22e113
://www.finnix.org/ btw. is n22e113 your geographic location? :) -- Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all

[leaf-user] alix2d3 + v5.1.{1,2} Intermittent Boots

2015-02-25 Thread n22e113
Huston! We have a problem with: Bering-uClibc_5.1.{1,2}_geode_syslinux_serial115200.tar.gz Using alix2d3 with v5.1.{1,2} had resulted intermittent boots. Once in awhile, it cannot read leaf.cfg and reports both PKGPATH and LRP are 'empty or unset'? It booted okay only 15 minutes before as I have

Re: [leaf-user] alix2d3 + v5.1.{1,2} Intermittent Boots

2015-02-25 Thread n22e113
On 2/25/2015 17:45, Erich Titl wrote: Have a look at yout boot parameters. With ALIX the pata driver is different and might need some tweaking. I am using grub to boot my boxes, but the driver parameters should behave the same Hello, et and Andrew, Adding 'usb_wait=2' works so far for the last

Re: [leaf-user] searching for help with webconf

2015-02-22 Thread n22e113
I'll send you off-list the files as well and I'd like to help with coordinatination with the users that contacted you. Hi, Kp, Unable to send mail to you (off-list) at kap...@users.sourceforge.net? Help? -- Download

Re: [leaf-user] searching for help with webconf

2015-02-06 Thread n22e113
No takers? Not a native nor fluent English person but with a good command of the written English language. Please contact me off-list! :) Hello, kp, Simon, Bob and Robert had contacted me off-list. Please reply to this message. I was just going to volunteer as well :) Looks like at least

Re: [leaf-user] searching for help with webconf

2015-02-05 Thread n22e113
Therefor we are searching for native-english or fluent-english speakers who want's to help us to improve webconf. It requires no technical experience and we'll take care of the work to commit it to git etc.. No takers? Not a native nor fluent English person but with a good command of the

[leaf-user] Leaf 5.1.2 Shorewall Blacklist File Misnamed

2015-01-06 Thread n22e113
Hello, Leaf version 5.1.2 package shorwall.lrp: File '/etc/shorewall/blules' should be named '/etc/shorewall/blrules', no? Thanks! -- Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by

Re: [leaf-user] git Clone as Guest Failed!

2014-04-29 Thread n22e113
On 4/29/2014 14:18, KP Kirchdörfer wrote: Just tried myself and it seems to work: Hi, KP, Thanks! Still no luck with: # git clone git://git.code.sf.net/p/leaf/bering-uclibc \ leaf-bering-uclibc with the following errors: fatal: early EOFs: 54% (10772/19588), 2.27GiB | 259 KiB/s fatal:

[leaf-user] git Clone as Guest Failed!

2014-04-22 Thread n22e113
Hello, While cloning with the following commands: cd /usr/src git clone git://git.code.sf.net/p/leaf/bering-uclibc leaf-bering-uclibc Had resulted the following errors: Cloning into 'leaf-bering-uclibc'... remote: Counting objects: 19571, done. remote: Compressing objects: 100% (12018/12018),

Re: [leaf-user] Strongswan or Not Strongswan?

2014-04-21 Thread n22e113
On 4/21/2014 03:59, Erich Titl wrote: I don't have a development system right now and had even some difficulties with a very modern distro running it. Maybe later this year, but then maybe someone else is picking it up. Erich, Thanks!

[leaf-user] Strongswan or Not Strongswan?

2014-04-20 Thread n22e113
I have been looking at openswan vs strongswan and looks like strongswan: http://www.strongswan.org/ is being actively developed for the past five years. Q. Any chance of Leaf supporting strongswan in the near future? Many thanks! Kwon

Re: [leaf-user] leaf mailing list hacked?

2014-04-17 Thread n22e113
On 4/17/2014 08:48, Michael wrote: Anyone else getting spam on their Leaf mailing address? Nope! -- Learn Graph Databases - Download FREE O'Reilly Book Graph Databases is the definitive new guide to graph databases and

[leaf-user] wlan0 with alix2d3 - Leaf v.5.0.3

2014-04-11 Thread n22e113
Hello, Trying to install a SMCWN6401C wlan0 into alix2d3 MB using leaf Bering-uClibc_5.0.3_geode_syslinux_serial.tar.gz and following the Bering-uClibc 5.x - User Guide - Advanced Topics - Setting Up a Wireless Access Point (the Guide). Everything seems to work. Both my iPad and laptop were

Re: [leaf-user] wlan0 with alix2d3 - Leaf v.5.0.3

2014-04-11 Thread n22e113
On 4/11/2014 12:22, Erich Titl wrote: Q2. Am I missing something else? routes and shorewall settings? Hi, Erich, # ip route default via 192.168.72.254 dev eth0 metric 206 192.168.0.0/24 dev wlan0 proto kernel scope link src 192.168.0.254 192.168.1.0/24 dev eth1 proto kernel scope link src

Re: [leaf-user] wlan0 with alix2d3 - Leaf v.5.0.3

2014-04-11 Thread n22e113
On 4/11/2014 15:22, Victor McAllister wrote: /etc/shorewall/masq eth0 192.168.1.0/24 wlan0 192.168.0.0/24 should be eth0 192.168.0.0/24 for wlan0 you are masq from eth0 to wlan0 not from wlan to itself Victor, Ha! LOL! Nearly went blind looking for this one! Thanks a 1,000,000! Have a good

Re: [leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-19 Thread n22e113
On 3/17/2014 12:32, Erich Titl wrote: 2. try grub2. Let us know when you are there :-) No joy as of March 19, 2014 May or might not try again anytime soon! :( -- Learn Graph Databases - Download FREE O'Reilly Book

Re: [leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-19 Thread n22e113
On 3/19/2014 16:59, Erich Titl wrote: what about concatenating the initd files? :-) It works and here is how I did it: mkdir ./tmpinitrd cd ./tmpinitrd zcat ../initrd.lrp | cpio -iv zcat ../initmod.lrp | cpio -iv find . -print | cpio -o -H newc | \ gzip -9 -c - ../initrd.new cd .. mv

Re: [leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-17 Thread n22e113
On 3/17/2014 11:02, KP Kirchdörfer wrote: If you have initrd.lrp and initmod.lrp in yur root directory you may try initrd=initrd.lrp,initmod.lrp without the leading slash. With grub 0.9x: 1. Didn't work without the leading slash; and 2. didn't work: initrd=/initrd.lrp,initmod.lrp; and 3.

[leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-16 Thread n22e113
Hello, The latest version 5.0.3 and 5.0.3-rc1 using PC Engines alix2d3 MB hangs at (quote): [ 1.193755] Switching to clocksource tsc None of the following solutions work! http://forums.gentoo.org/viewtopic-t-978248-start-0.html https://bbs.archlinux.org/viewtopic.php?id=150791 Thanks! K.

Re: [leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-16 Thread n22e113
On 3/16/2014 15:25, KP Kirchdörfer wrote: So we need more details how you did the upgrade. Hello, Didn't do an upgrade! But I use: 1. grub 0.97 and ext2 file system; 2. modified initrd.lrp with: 2a. echo -e mbcache\next2 ./boot/etc/modules 3. modified initmod.lrp and added: 3a.

Re: [leaf-user] ALIX.2d3 Board Hang while Switching to clocksource tsc

2014-03-16 Thread n22e113
On 3/16/2014 16:16, n22e113 wrote: kernel /syslinux/linux rw root=/dev/ram0 \ LEAFCFG=/dev/sda2:ext2 initrd=/initrd.lrp,/initmod.lrp \ console=ttyS0,38400n8 console=tty0 I took out console=tty0 from above and now the errors are (quote): modprobe: module isofs not found in modules.dep modprobe

[leaf-user] Packages for X86_32 version 5.x Access

2014-03-10 Thread n22e113
Hi, Cannot access Released packages from this page: http://leaf.sourceforge.net/bering-uclibc/index.php?module=pagemasterPAGE_user_op=view_pagePAGE_id=30MMN_position=44:44#RELEASEDX86_32 Can someone please have a look? Cheers!

Re: [leaf-user] DYNDNS Again!

2013-10-22 Thread n22e113
Hi Kwon, here's one I used to check the success (or otherwise) of a DYNDNS update. You can use it as a basis. Put it ib/etc/ppp/ip-up.d/ and set it's executable flag and it will get called by the ppp daemon whe an ip change occurs. After waiting for things to settle, it compares the old

[leaf-user] DYNDNS Again!

2013-10-21 Thread n22e113
Hi, Anyone has a cron script I could borrow (and never pay back) to send an email to myself whenever the external IP of any Leaf box has changed? Don't really want to rely on external sites as they don't always work! Cheers, Kwon

[leaf-user] 5.0.1 Boot with Grub 0.97, ext2 and alix2d3

2013-10-10 Thread n22e113
Hello, Trying out the 5.0.x leaf and kernel hangs at: [ 1.19xxx] Switiching to clocksource tsc Any one experiences the issue above? Cheers, Kwon -- October Webinars: Code for Performance Free Intel webinars can help you

Re: [leaf-user] 5.0.1 Boot with Grub 0.97, ext2 and alix2d3

2013-10-10 Thread n22e113
Looks like my issue with libata try the libata.force kernel parameter. Hi, Erich, Thanks! I have been trying all options/parameters from this link: https://www.kernel.org/doc/Documentation/kernel-parameters.txt So far still stuck! I am using an alix2d3 board. Anyone has a solution? Please

Re: [leaf-user] shorewall challenge

2013-07-29 Thread n22e113
ACCEPT loc:192.168.20.1 net:host1.theirdom.de80,443 ACCEPT loc:192.168.20.1 net:host2.theirdom.de80,999 Boris, good evening, From your posting, I think you have two problems: 1. There is NXDOMAIN for theirdom.de when I use the command dig? Therefore you need to use the

[leaf-user] Leaf v4.3.1

2013-01-23 Thread n22e113
Hi, Found this in kern.log: kmemleak: 30 new suspected memory leaks (see /sys/kernel/debug/kmemleak) But found nothing in /sys/kernel/debug leaf.cfg: LRP=root config etc modules license local mawk iptables ip6tables tc ppp pppoe openvpnz easyrsa openssl liblzo libssl libcrpto bbntpd libm perl

Re: [leaf-user] changing leaf ip from 192.168.1.254

2012-08-22 Thread n22e113
Is there anything to change other than /etc/network/interfaces and /etc/shorwall/masq? A grep of 192.168.1.254 turned up those two places. Use DSL modem as a bridge should do it! -- Live Security Virtual Conference

Re: [leaf-user] changing leaf ip from 192.168.1.254

2012-08-22 Thread n22e113
Is there anything to change other than /etc/network/interfaces and /etc/shorwall/masq? A grep of 192.168.1.254 turned up those two places. Use DSL modem as a bridge should do it! In addition, here is an example: http://teksavvy.com/en/support-speedtouchsetup-b.asp

[leaf-user] Shorewall Log Additional Variables v.4.2.1

2012-08-20 Thread n22e113
Hello, I need to place this in /etc/default/local.start to make the title/body lineup properly: sed -i 's/Shorewall:--;$/Shorewall:--; s-kernel: --; s-\\[.*\\] --;/' /var/webconf/www/logfiles.cgi Cheers! Kwon -- Live

Re: [leaf-user] dnsmasq problem?

2012-07-08 Thread n22e113
I put the dns servers in a separate file /etc/dns.conf to decouple dnsmasq from resolv.conf. This file only has the IPs of my ISPs DNS servers. resolve.conf only has 127.0.0.1 Hi, Victor, I have the same setup as yours, a separate file /etc/ppp/resolv.conf: nameserver 206.248.a.b nameserver

[leaf-user] Networking - Interface Status Display 3.1.x vs 4.2.x

2012-06-27 Thread n22e113
Hello, I need to look at the number of logins with pppoe/ppp0 and the old behaviour of v3.1.x general-info.cgi works great. I was able to modify /var/webconf/www/general-info.cgi line 37: - sed -r 's//\lt;/; s//\gt;/; s/^[[:digit:]]+: //; 2,$ {/^[[:graph:]]/ i\ + sed -r 's//\lt;/;

Re: [leaf-user] QoS Leaf 4.2.1 + Shorewall 4.4.27.3

2012-06-14 Thread n22e113
I'm betting that you don't have the cls_basic kernel module loaded. -Tom Your guess right! It was even mentioned in Shorewall FAQ#67 that the cls_basic kernel module needs to be loaded. Thanks a 1,000,000. Cheers, Kwon

Re: [leaf-user] QoS Leaf 4.2.1 + Shorewall 4.4.27.3

2012-06-12 Thread n22e113
Error: RTNETLINK answers: No such file or directory We have an error talking to the kernel ERROR: Command tc filter add dev eth0 parent : protocol all prio 10 basic police mpu 64 rate 3000kbit burst 50kb action drop Failed Just wondering is this an undocumented feature?

[leaf-user] QoS Leaf 4.2.1 + Shorewall 4.4.27.3

2012-06-11 Thread n22e113
A fresh install with ALIX2D3+CF; system works fine except when trying to enable simple traffic shaping/control as according to http://www.shorewall.net/simple_traffic_shaping.html with the following config returned error: #/etc/shorewall/shorewall.conf: TC_ENABLED=Simple

Re: [leaf-user] Trying to upgrade to Bering-uClibc 4.x

2012-04-11 Thread n22e113
I downloaded the file Bering-uClibc_4.1_geode_syslinux_ser.tar. The above tar file will redirect all output to /dev/ttyS0 (aka COM1:DB-9) serial ports (See page 12 of your AR-B1554 User's Guide). You need to use a null modem cable and attach the other end to a Linux console using minicom or

Re: [leaf-user] Trying to upgrade to Bering-uClibc 4.x

2012-04-11 Thread n22e113
On 4/11/2012 19:16, Brad Klinghagen wrote: Now that it is booting, can I just copy the moddb.lrp and configdb.lrp from my existing production device (BuC 3.x) to this test device to establish the configuration (wanted to keep the same setup). I assume, even if I copy those *.lrp files, I'll

Re: [leaf-user] Manually unpacking mounting initrd.lrp

2012-01-22 Thread n22e113
Hi, I'm testing with 4.2b1 and want to examine the uncompressed-then-mounted contents of the initrd.lrp file. To change: # gunzip initrd.lrp initrd # mkdir ./tmprd cd ./tmprd # cpio -id ../initrd After modify, to re-compress: # find . | cpio --create --format='newc' ../initrd-new # cd ../

Re: [leaf-user] Missing /usr/Sbin files in v4 EasyRSA

2012-01-22 Thread n22e113
I also noticed that clean-all is there, however the one I actually need, build-ca, is definitely missing. Try: # /usr/sbin/pkitool --initca # /usr/sbin/pkitool --server ${SERVER} http://ubuntuguide.org/wiki/OpenVPN_server Cheers!

Re: [leaf-user] Replacement lrp for ez-ipupdate (ezipupd.lrp)

2012-01-06 Thread n22e113
On 1/6/2012 01:58, Erich Titl wrote: Can you state what is wrong with it? According to their website, _only_ support dynamic DNS service offered at: * http://www.ez-ip.net (No longer exist!) * http://www.justlinux.com (Lots broken links!) * http://www.dhs.org * http://www.dyndns.org *

Re: [leaf-user] Replacement lrp for ez-ipupdate (ezipupd.lrp)

2012-01-06 Thread n22e113
On 1/6/2012 09:43, Mike Noyes wrote: It looks like there is some work being done in this area. OpenWRT is using ddns-scripts, and the creator of that set of scripts is working on ddns-gargoyle. It may be worthwhile to take a look at them. Thanks, Erich, will monitor the progress of the above

[leaf-user] Replacement lrp for ez-ipupdate (ezipupd.lrp)

2012-01-05 Thread n22e113
Hi, As ez-ipupdate is very old and need dynamic DNS service for no-fixed-ip (DSL/Cable) firewall for Leaf v4.1.1. Any good suggestions? Cheers, Kwon -- Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a

[leaf-user] /dev/net/tun Device Missing - Leaf V4.1.1

2011-12-19 Thread n22e113
Hi, I enabled the following line in /etc/mdev.conf but openvpnz didn't work? # activate for openvpn tun 0:0 660 @ mkdir /dev/net; ln -s /dev/tun /dev/net/tun I can manually create the soft link and openvpnz would work. I try the following using the example here:

Re: [leaf-user] Module loading in BuC 4.0.1

2011-09-07 Thread n22e113
On 9/6/2011 13:43, Erich Titl wrote: [ 40.202667] ath5k: disagrees about version of symbol module_layout [ 40.259703] crc32: disagrees about version of symbol module_layout I also had this problem before but don't remember how I fixed exactly! I am using gurb as well. Except I have gurb in

Re: [leaf-user] Module loading in BuC 4.0.1

2011-09-07 Thread n22e113
On 9/6/2011 13:43, Erich Titl wrote: [ 40.202667] ath5k: disagrees about version of symbol module_layout [ 40.259703] crc32: disagrees about version of symbol module_layout I also had this problem before but don't remember how I fixed exactly! I am using gurb as well. Except I have gurb in

Re: [leaf-user] Shorewall Logging and dmesg

2011-08-25 Thread n22e113
Things worked much nicer in 3.x (well they all worked and played nice) DITTO Anyone have any suggestions? 3.1.x -- EMC VNX: the world's simplest storage, starting under $10K The only unified storage solution that

Re: [leaf-user] Shorewall Logging and dmesg

2011-08-23 Thread n22e113
Since moving to 4.x shorewall is dumping all it's output to dmesg as well as the log files configured via syslog-ng. How do I stop shorewall from outputting to dmesg? Hi, That shouldn't happen? I have one site running 4.1-beta1 and shorewall works/logs as expected. Only thing I can suggest

Re: [leaf-user] Web Interface Issue

2011-08-14 Thread n22e113
I _believe_ your issue is within webconf.lwp. try the one from the latest beta. My intention was, to move all standard pages to webconf.lrp, and in the long run, I probably will. Hi, Erich, That's correct! I found the file leafcfg.cgi in webconf.lwp. I think all standard pages should be in

Re: [leaf-user] Web Interface Issue

2011-08-10 Thread n22e113
On 8/10/2011 02:20, Erich Titl wrote: BAsically hat is the trick, you can try to load the lwp.lrp for 4.1beta Hi, Erich, I cannot find lwp.lrp inside Bering-uClibc_4.1-beta1_i686_isolinux_vga.iso! Q. How/where can I download a copy of lwp.lrp to test? Many thanks, Kwon

Re: [leaf-user] Web Interface Issue

2011-08-08 Thread n22e113
Hi, Using PCEngine alix2d1 mb and Leaf 4.1-b1 Getting the following error while clicking on |Edit leaf.cfg|: haserl CGI Error Unknown operation near line 57 of leafcfg.cgi With Erich's help off-list, I was able to make it work by changing the file /var/webconf/www/leafcfg.cgi by: 1.

[leaf-user] /var/webconf/www/lrcfg.cgi

2011-08-06 Thread n22e113
Hi, all, Leaf v.4.x Line 37 of this file generates an error on the web GUI, quote: root.sys ) service=sysklogd inetd The correct syntax should be: root.sys ) service=syslog-ng inetd Q1. How do you save this file after the above change? Q2. What package can one locate this

[leaf-user] Web Interface Issue

2011-08-04 Thread n22e113
Hi, Using PCEngine alix2d1 mb and Leaf 4.1-b1 Getting the following error while clicking on |Edit leaf.cfg|: haserl CGI Error Unknown operation near line 57 of leafcfg.cgi Thanks,Kwon -- BlackBerryreg; DevCon Americas,

Re: [leaf-user] Leaf 4.0.1 - Problems loading ext2.ko

2011-07-31 Thread n22e113
ext2 depends on mbcache.ko. Thanks a 1,000,000! Both 4.0.1 and 4.1-b1 work okay! -- Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win

Re: [leaf-user] VPN Advice

2011-07-30 Thread n22e113
On 7/30/2011 07:11, Erich Titl wrote: I am running a number of connections just like yours on PCEngines WRAP and at the central site a Nexcom NSA 1125 as there is more power needed. Hi, Erich, thanks! I am thinking of using PCEngines alix2d13 for all sites: http://www.pcengines.ch/pic/alix.jpg

Re: [leaf-user] VPN Advice

2011-07-30 Thread n22e113
On 7/30/2011 07:11, Erich Titl wrote: I am running a number of connections just like yours on PCEngines WRAP and at the central site a Nexcom NSA 1125 as there is more power needed. Hi, Erich, thanks! I am thinking of using PCEngines alix2d13 for all sites: http://www.pcengines.ch/pic/alix.jpg

Re: [leaf-user] VPN Advice

2011-07-30 Thread n22e113
On 7/30/2011 15:41, KP Kirchdoerfer wrote: I prefer OpenVPN over ipsec. Works fast and reliable, is adaptable to different setups (e.g. access from site to site, or from net to net) and IMHO easier to setup than ipsec. Hello, kp, Thanks! I will try both OpenVPN and IPSec(OpenSWAN). A real

[leaf-user] Leaf 4.0.1 - Problems loading ext2.ko

2011-07-30 Thread n22e113
Hi, Need to load ext2.ko (from modules.tgz) but got the following error messages if: firewall# modprobe -v ext2 modprobe: can't load module ext2 (ext2.ko): unknown symbol in module, or unknown parameter firewall# insmod /lib/modules/ext2.ko insmod: can't insert '/lib/modules/ext2.ko': unknown

Re: [leaf-user] Leaf 4.0.1 - Problems loading ext2.ko

2011-07-30 Thread n22e113
Also loading module ext2 problem with Leaf 4.1-beta1 (from dmesg): [ 13.552138] ext2: Unknown symbol mb_cache_create (err 0) [ 13.571824] ext2: Unknown symbol mb_cache_shrink (err 0) [ 13.590558] ext2: Unknown symbol mb_cache_entry_insert (err 0) [ 13.610770] ext2: Unknown symbol

[leaf-user] VPN Advice

2011-07-29 Thread n22e113
Hi, Need to do multiple VPNs to head office from three different locations: +--VPN---USA | Head_office---VPN---Canada | +--VPN---China All sites will use PC Engines hardware and Leaf. What's best solution? IPSec? OpenVPN? OpenSWAN? Thanks, Kwon

Re: [leaf-user] Shorewall Docs 3.x for Bering 3.1?

2011-06-19 Thread n22e113
The deprecated Shorewall SVN repository may help. http://shorewall.svn.sourceforge.net/viewvc/shorewall/ Mike, Thanks! Found the dos under: http://shorewall.svn.sourceforge.net/viewvc/shorewall/branches/3.4/docs/ Is there a HowTo somewhere that I can use it to install the ./docs/ into my

[leaf-user] Shorewall Docs 3.x for Bering 3.1?

2011-06-16 Thread n22e113
Hi, I am still using Bering 3.1 and need some info on shorewall 3.x! http://www.shorewall.net/3.0/Documentation.htm#Rules etc. no longer works? Is there an archive somewhere? Thanks! Kwon -- EditLive Enterprise is the

Re: [leaf-user] PC Engines Alix2D13 and Bering 4 Beta4_geode Boot Problem

2011-02-07 Thread n22e113
Pls try to change SERIAL, console, Alix Bios setup and minicom to use 19200 instead 115200. kp The default is 38400 8N1 flow control = none or xon-xoff -- The ultimate all-in-one performance toolkit: Intel(R)

[leaf-user] Shorewall /etc/shorewall/rules Help?

2010-12-18 Thread n22e113
I have a box running WinXP-SP3 and from the Leaf web interface, under |General|Active Connections|Masqueraded connections|, have the following established connections: Pkg Port Source Destination Time to live State Tcp at 80/www from 192.168.22.206 to 208.76.87.69. 392069 sec. ESTABLISHED. Tcp

Re: [leaf-user] Big thanks for leaf

2010-11-05 Thread n22e113
The shorewall website has excellent examples and now I know exactly how and why my router is configured. It was not difficult at all. I just keep adding features with no surprises. DITTO! The alternative is learning iptables! ;-( That would take me months! Thanks, Tom!

Re: [leaf-user] install on PC-Engines Alix board?

2010-07-09 Thread n22e113
For access to the serial console add console=ttyS0,115200n8 to syslinux.cfg. Getting started… - Install a bootable CF card. Hot swap of CF cards is not supported! - Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 38400 8N1, flow

[leaf-user] Webconf Access Control

2009-08-20 Thread n22e113
While testing leaf v3.1.1-beta3, I am stuck at the page using firefox: http://192.168.1.210/wc-passwd.cgi Except for the General Health and Active Connections pages. Leaving both Username and Password blank and hitting the |Apply| button will only get me back to the same page? If Username=admin

Re: [leaf-user] Webconf Access Control

2009-08-20 Thread n22e113
While testing leaf v3.1.1-beta3, I am stuck at the page using firefox: http://192.168.1.210/wc-passwd.cgi Except for the General Health and Active Connections pages. Leaving both Username and Password blank and hitting the |Apply| button will only get me back to the same page? If

Re: [leaf-user] Webconf Access Control

2009-08-20 Thread n22e113
If you don't like this behaviour, as you said it is open source, you can look into /var/webconf/lib/preamble.sh for !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN html head $( /var/webconf/lib/passcheck.sh ) titleBering LEAF Firewall/title link rel=stylesheet type=text/css

Re: [leaf-user] Power Consumption

2009-08-10 Thread n22e113
-snip- When considering power consumption it still makes a lot of sense to use a legacy system and many of those will simply not boot from CD or USB devices (but will allow using once booted). Try: http://www.pcengines.ch/alix2d1.htm From their manual: 3.5W at Linux idle, peak about 5W

[leaf-user] OpenNTPD Failed to start with PC Engines' alix2d1 Board

2009-08-05 Thread n22e113
Hey, openntpd failed to start with PC Engines' alix2d1 MB on startup/reboot? Is this because the MB doesn't have a RTC battery? Ref: http://www.pcengines.ch/alix2d1.htm Thanks, Kwon -- Let Crystal Reports handle the

Re: [leaf-user] Project Admin

2009-08-05 Thread n22e113
On 8/3/2009 08:21, Mike Noyes wrote: (from leaf.devel) Everyone, Erich Titl (etitl) promoted to project admin, and Jeff Newmiller (jdnewmil) demoted to project member. Congrats! -- Let Crystal Reports handle the

Re: [leaf-user] PCI Utilities Package (including lspci) for Bering-uClibc 3.x

2009-07-29 Thread n22e113
When I run into a similar situation (trying to get new hardware/drivers working) I usually boot up a LiveCD version of Linux and see what it takes to make the hardware work. Once I know which drivers are needed and have verified that the hardware works etc. I can switch to Bering check that

Re: [leaf-user] unetbootin

2009-02-26 Thread n22e113
On 2/24/2009 04:45, Joep L. Blom wrote: As more and more system on the market don't have any floppy drives anymore, wouldn't it be a good idea to make a leaf-distribution that can be stored on an USB-stick (e.g. with unetbootin). Of course the BIOS must be prepared to use the USB-port to

Re: [leaf-user] PC Engines alix2d1 System Board - Problem using Debian/minicom

2009-02-05 Thread n22e113
And configuring it with Ubuntu/minicom was easy once I figured out the serial hardware settings and get them in sync. Can you please publish your hardware settings? The alix2d1 is IMHO a recommendation for LEAF routers. DITTO

Re: [leaf-user] PC Engines alix2d1 System Board - Problem using Debian/minicom

2009-02-05 Thread n22e113
A - Serieller Anschluss : /dev/ttyS0 B - Pfad zur Lockdatei : /var/lock E - Bps/Par/Bits : 115200 8N1 F - Hardware Flow Control: No G - Software Flow Control: No Make shure the Alix settings are exactly the same. Also make shure that

Re: [leaf-user] PC Engines alix2d1 System Board - Problem using Debian/minicom

2009-01-30 Thread n22e113
I had a similar problem with a proxim AP-4000, Latter I found out that I had to turn off hardware flow control in order to communicate ( somehow decently ) Tried that too with hardware and/or software flow control on/on,on/off,off/on,off/off. Didn't work. In fact, tried to make it work for

[leaf-user] PC Engines alix2d1 System Board - Problem using Debian/minicom

2009-01-29 Thread n22e113
Hi, Purchased the following from PC Engines Europe: http://www.pcengines.ch/alix2d1.htm Would like to report that the board didn't play nice with Debian Etch and minicom. The serial port prints out lots of garbage. Ended up using Windoze and Putty v0.60 as a console. The board is up and running

Re: [leaf-user] OpenVpnZ Question?

2009-01-08 Thread n22e113
Theoretically, yes. Practically I would not even think about it. If you can guarantee the uniqueness of all addresses within the various networks you could use tap to bridge the networks. I do not recommend it. Renumber one of the sites. Thanks! The issue had arise because we were using

[leaf-user] OpenVpnZ Question?

2009-01-07 Thread n22e113
I have been reading but cannot find anything on this! Q. Is the following possible? (ie. both end points have the same subnet IP addresses)! Thanks, Kwon fw(leaf)--loc1(192.168.1.0/24) | +--dmz1(192.168.2.0/24) | Internet +(openvpnz) | | fw(leaf)--loc2(192.168.1.0/24)

Re: [leaf-user] USB chapter written by Jorn Eriksen

2008-10-06 Thread n22e113
Everyone, I just checked, and our documentation is available now. http://leaf.sourceforge.net/doc/ Thanks a 1,000,000! Kwon - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build

Re: [leaf-user] newer r8169 network module for RTL8110SC

2008-09-23 Thread n22e113
On 6/18/2008 17:09, marvin horst wrote: Please ignore my previous question. I was able to get my build environment setup and compile the module without any problems :) I wasn't expecting it to go so smoothly. Kudos to those of you who wrote the buildtool environment. The new driver is

Re: [leaf-user] Hardware recommendations (new stuff)

2008-05-25 Thread n22e113
The units I played with were purchased by a friend of mine who obtained them directly from the vendor (in Hong Kong, I believe). They wanted a small fortune to ship them (via express air delivery), but you can provide UPS/FedEx shipping info and get them sent via more affordable surface