Hi!

I installed MNF (config 1x eth - lan, external ISDN TA - wan) and I saw following bugs:

1. When I configured dialup connection using web interface (Internet access, Analog 
modem),
- file /etc/ppp/options was empty - I had to add option noauth and name <login> by hand
- PPP special command was added to /etc/sysconfig/network-scripts/chat-ppp0: 
(AT<PPP_COMMAND>DT<NUMBER>
Fortunatly it was good, bacause I write in this place modem initstring :-)
I'm confused, because I saw /usr/share/naat/template/etc/ppp/options, and it should 
work.

2. Some problem with diald. Diald create interface tun0, but shorewall denied access,
and diald can't dial :-(
I solved this problem - It was simple (using web interface) added extra interface to 
shorewall:
wan     tap0    detect
and of course remove in shorewall config dmz.

When diald started to dial succesfully, I saw in /var/log/messages
error messages from shorewall, because diald after dial
ran command ip-up with unecessary arguments (man diald):
/sbin/shorewall reset <iface> <netmask> <local ip> <remote ip> <metric>. 
To avoid this problem (with uneccessary command line parameter) I wrote simple 
wrapper /sbin/shorewall-reset:
/sbin/shorewall reset
and changed /etc/diald/diald.conf:
ip-up /sbin/shorewall-reset
ip-down /sbin/shorewall-reset

Now I have small diald error in messages:
diald: start tap0: SIOCSIIFMETRIC: Operation not supported
diald: start ppp0: SIOCSIIFMETRIC: Operation not supported

but all working fine.

And small wishlist
- remove above-mentioned bugs:
- possibility to add modem initstring with web interface
- auto-remove unecessary rules, zones and polices (for example dmz related,
when dmz is missing - only one eth card)

-- 
Pawel Jablonski

Reply via email to