[Vyatta-users] Vyatta virtualization with Xen

2007-10-08 Thread Dominique Jeannerod
Hi, i'm trying to setup Vyatta in a Xen virtual machine (paravirtualized), and it was ok with version VC2_1, but i need to fix some Vyatta bugs, and run the VC2_2 version. But VC2_2 comes with a 2.6.20 kernel ... and here come the problem, and question : xen only officially supports the 2.6.18

[Vyatta-users] OSPF Passive

2007-10-08 Thread Jon
Hi, In the Vyatta command reference, the use of ospf passive mode is described as: (With small typo) Optional. Determines whether OSPF sends hello messages out ON this interface. If hello messages are not sent, neighbor relationships will not be established on that interface. However,

Re: [Vyatta-users] OSPF Passive

2007-10-08 Thread Robyn Orosz
Hi Jon, You are correct that the XORP user manual does correctly describe the current behavior. This behavior has been reported as an issue in Vyatta Bugzilla: https://bugzilla.vyatta.com/show_bug.cgi?id=1793 And in XORP Bugzilla: http://www.xorp.org/bugzilla/show_bug.cgi?id=566 I'll

[Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt

2007-10-08 Thread Jeff
Mysteriously sometime between Thursday afternoon and Monday morning the vyatta main webpage is gone and I see the lighthttpd placeholder page nor is it prompting to allow the connection as it did before and i do not know why..??? Things were all there Thursday afternoon.. I have not

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt

2007-10-08 Thread Robyn Orosz
Hi Jeff, We've seen this issue on systems that were improperly installed with the root and config partitions pointing to the same disk partition (ex. both root and config installed on sda1). This causes a loop in the file system that can result in the web-gui falling back to the default

Re: [Vyatta-users] Main Vyatta web Page mysteriously g one and no login prompt

2007-10-08 Thread Jeff
I will check that. All I can say at this point is that I ran install from the cd and let it do its thing automatically _ From: Robyn Orosz [mailto:[EMAIL PROTECTED] To: Jeff [mailto:[EMAIL PROTECTED] Cc: vyatta-users@mailman.vyatta.com Sent: Mon, 08 Oct 2007 11:39:42 -0400

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt (FileSystem Included)

2007-10-08 Thread Jeff
Heres a snip from the df command Copy of file system snip Linux localhost 2.6.20 #1 Thu Aug 23 12:25:11 PDT 2007 i686 Welcome to Vyatta. This system is open-source software. The exact distribution terms for each module comprising the full system are described in the individual files

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt (FileSystem Included)

2007-10-08 Thread Robyn Orosz
Hi Jeff, It looks like your system was installed properly (root on hde1 and config on hde2). When you run: ps -ef | grep lighttpd What is the output? When the web-gui has been started properly, there should be a process referencing the following: /opt/vyatta/etc/lighttpd.conf Can you also

Re: [Vyatta-users] Vyatta virtualization with Xen

2007-10-08 Thread Dave Roberts
Vyatta does not support running paravirtualized under Xen. We do run under Xen in non-para modes, however, using the hardware virtualization support in newer x86 processors. -- Dave _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dominique Jeannerod Sent: Monday,

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt (FileSystem Included)

2007-10-08 Thread Jeff
Heres the output --- Welcome to Vyatta. This system is open-source software. The exact distribution terms for each module comprising the full system are described in the individual files in /usr/share/doc/*/copyright. vyatta:~# ps -ef | grep lighttpd www-data 8256 1 0 Oct07 ?

[Vyatta-users] New user question: Configuring Vyatta to be DHCP client and NAT to a DHCP assigned addr

2007-10-08 Thread William McVey
I'm trying to replace a Pix 501 with a Vyatta router/firewall on my home network. I think I have most of the configuration migrated except I can't seem to figure out how to get the Vyatta device to configure one of its interfaces with DHCP and then to NAT all traffic to that DHCP assigned IP

Re: [Vyatta-users] New user question: Configuring Vyatta to be DHCPclient and NAT to a DHCP assigned addr

2007-10-08 Thread Sanjoy Dey
Hi William: DHCP client functionality is not supported yet on Vyatta mostly because of the way ip addressing and interfaces are handled within the system. We are working on fixing some of the infrastructure issues to be able to deliver this in the near future. Stay tuned. Meanwhile please feel

[Vyatta-users] Problems when configuring multicast...

2007-10-08 Thread Paco Alcantara
Hi All, I have posted a mail some days ago describing a problem when I tried to configure multicast in VC2.2. After studing the problem, I have realized that the problem is in the kernel, where multicast is not enabled When I execute sysctl -a | grep mc_forwarding I get the following answer:

Re: [Vyatta-users] How firewalls work using Vyatta OFR

2007-10-08 Thread Robert Bays
Sorry for the late reply everyone. Been out of town for a while. I will try to summarize a few answers for this thread into one email. Hope it's clear. Vyatta uses iptables/netfilter for our firewall implementation. For discussion refer to the following diagram... This is pulled from section

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt

2007-10-08 Thread Scott Pickles
I agree with Jeff. I too installed Vyatta using the default prompts. If you are aware of the fact that installing root and config on the same partitions is an issue, why not either put a disclaimer in the documentation, the setup, or both? Regards, Scott On 10/8/07, Jeff [EMAIL PROTECTED]

[Vyatta-users] Prevent root ssh login, but allow shell access?

2007-10-08 Thread Daren Tay
Hi guys, I have getting alot of such entries in my log: Oct 7 14:35:12 vyatta sshd[27845]: (pam_unix) check pass; user unknown I think its just some bots trying to login. Anyway to prevent this? Also, currently I allow root login, but I don't feel safe with that option. I can disable that

[Vyatta-users] Logging

2007-10-08 Thread Daren Tay
Hi guys, I have been having problems with my web servers behind a vyatta router. I am thinking of trying to check if vyatta is dropping packets.. what should I do to find out? Also.. I realise under System, there's no logging. What's the minimal logging should I use to get useful information

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and no login prompt

2007-10-08 Thread Justin Fletcher
It's a recent discovery tracked in the Bugzilla database. In the next release, the installation script checks for it, and ensures that you can't do that. Justin On 10/8/07, Scott Pickles [EMAIL PROTECTED] wrote: I agree with Jeff. I too installed Vyatta using the default prompts. If you are

Re: [Vyatta-users] Logging

2007-10-08 Thread Justin Fletcher
Easiest way is with a show interfaces - it'll give you packet statistics. By default, the system logs at warning level, so any major issues will be visible using show log. Justin On 10/8/07, Daren Tay [EMAIL PROTECTED] wrote: Hi guys, I have been having problems with my web servers behind a

Re: [Vyatta-users] Main Vyatta web Page mysteriously gone and nologin prompt

2007-10-08 Thread Marat Nepomnyashy
For more info on this problem, take a look at Bug 2366. http://bugzilla.vyatta.com/show_bug.cgi?id=2366 The 2.3 release will no longer have this problem. Now, the problem that Jeff has been experiencing has similar symptoms, but is actually due to different causes, as Jeff did not install with

Re: [Vyatta-users] Logging

2007-10-08 Thread Daren Tay
Ahh.. I Have to do show interfaces outside of config mode to see it... but is there any way to monitor http traffic only? Also, show log gives me this: ERROR: cannot show log because it doesn't exist. [edit] I missed something? Daren -Original Message- From: Justin Fletcher

Re: [Vyatta-users] Logging

2007-10-08 Thread Justin Fletcher
show log is also run outside of config mode -- You can run any command in config mode by putting run in front of it, as in run show log or run show interfaces. If you want to watch traffic, tshark is available from the root shell. Once you've run logged in as root, try tshark -i eth0 -n port 80