[Cooker] LILO and Boot Device
I had this problem last night when installing 8.1 It may be fixed in cooker, but just in case When installing Mandrake on a mixed system, SCSI and IDE drives, and the system is set to boot off the SCSI drives, LILO writes the boot device as /dev/hdc. It should be /dev/sda. The bios is set to boot off the SCSI and the system was booting off the SCSI until I installed Mandrake. I fixed the boot= in lilo.conf and it works fine now Steve
RE: [Cooker] LILO and Boot Device
When I installed I used Expert Install. I told it to use SDA as boot device but it still wrote boot=/dev/hda to lilo.conf. When I rebooted, the system just sat there with just a blinking cursor. I didn't even get any of the LILO display. I set the system to boot from IDE and got LI I then set it back to boot from SCSI and ran rescue. I went into lilo.conf and changed the first line to read boot=/dev/sda Everything works fine now. System Config: /dev/sda=/ /dev/sdb=/usr /dev/sdc=/home /dev/hdc=/windows Like I said, everything works fine now. If you're sure it was something I missed, then OK that's fine. If not, I'm just trying to help make a wonderful distro better:) Steve -Original Message- From: Guillaume Cottenceau [mailto:[EMAIL PROTECTED]] Sent: Monday, November 26, 2001 9:53 AM To: [EMAIL PROTECTED] Subject: Re: [Cooker] LILO and Boot Device Thomas, Stephen W-CONT [EMAIL PROTECTED] writes: I had this problem last night when installing 8.1 It may be fixed in cooker, but just in case When installing Mandrake on a mixed system, SCSI and IDE drives, and the system is set to boot off the SCSI drives, LILO writes the boot device as /dev/hdc. It should be /dev/sda. There is no way from DrakX to know if the BIOS is set up to boot off SCSI first or IDE first, so when there is not guess, it's assumed that IDE is first. When you choose to install the booloader on /dev/sda (expert mode), it should install the bootloader on /dev/sda and assume that the first disk is /dev/sda, thus boot correctly. -- Guillaume Cottenceau - http://people.mandrakesoft.com/~gc/
[Cooker-firewall] next version
My main concern for the next version of SNF is will it be streamlined? Will it run on a 400MB or 500MB hard drive? Will all of the non-firewall stuff be removed? I've seen Firewalls that do more than the first SNF but the download ISO is only 20MB and the hard drive requirment is 200MB. I prefer the Mandrake products though because I'd rather stick with one company for my Desktops, Servers, and Firewalls. The main problem I saw with the first SNF was that it didn't seem to be refined to just a Firewall. It had all of the core architecture for everything that the Mandrake OS had and that concerned me when it came to the securty of the system. A Firewall should have only enough on it to protect the network. I can understand putting Squid, IDS, and VPN on there. But, the first version had the full X installed as well as other services available. Thanks for your feedback, Steve
[Cooker-firewall] Streamlining SNF
Are there plans to streamline the SNF distribution in the future? My boss just dopwnloaded a Linux Firewall called SmoothWall that has a lot of the same features of SNF but is only a 20MB ISO. They took everything out that wasn't needed by the firewall/proxy/vpn/etc. I keep telling my boss to wait for the next release of SNF since I am a Mandrake supporter and run Mandrake on my server and workstations. I would like to use Mandrake on the whole network. Thanks, Steve
RE: [Cooker-firewall] SNF 7.2 - next release?
Florin, Where can we post suggestions for the next release? I posted in Mandrake Forum but there is so many complaints in there it's hard to seperate complaints from suggestions. Would this be a good place to discuss possible features? Steve -Original Message- From: Florin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 8:32 AM To: [EMAIL PROTECTED] Subject: Re: [Cooker-firewall] SNF 7.2 - next release? Andre Krajnik [EMAIL PROTECTED] writes: Is anywhere an overview of the features available? Which packets / services do you provide? all I can tell you is that we're going to use freeswan for vpn and shorewall instead of Bastille. -- Florin http://www.mandrakesoft.com
RE: [Cooker-firewall] SNORT STILL DOESN'T WORK
This is the final version that I downloaded the ISO about a week ago. When I install it on the system I am doing a complete format of the drives so I can make sure it will work for our clients. Stephen W. Thomas Network Engineer Technical Software Services [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: Florin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 19, 2001 7:26 PM To: [EMAIL PROTECTED] Subject: Re: [Cooker-firewall] SNORT STILL DOESN'T WORK I am really upset. I sent this bug/fix in for RC1 and again for RC2, and then for the last test version and you still haven't fixed it. When installing the Firewall by default snort DOES NOT HAVE the proper permissions to the /var/log/snort directory. I was told by the Mandrake team each time that it would be fixed in the next version and I find that in the Final version the bug is still there. Once again, here is the problem. The directory /var/log/snort has permissions: drw--- and should have drwx--. Also snort needs to be the owner for /var/log/snort and the sub-files/directories. If the permissions above are not correct, snortd will abort as soon as it's started. If I sound upset it's because I am. I reported this bug and the fix for it at least three times and three times I was told it would be fixed in the next release. It never was. My company is looking at setting up our clients with this excellent firewall/intrusion detection system. How can we recommend that they buy it if it DOESN'T WORK. Hello there, you are upset ? This is understandable. Now, what version are we talking about ? I thought we've fixed that already, ages ago... make sure you have the latest version, and I'll check here too... cheers, -- Florin http://www.mandrakesoft.com
RE: [Cooker-firewall] WWW Access fails
You say the problem may come from the dhcp client. Is this the client on Mandrkae Security that get's it's IP address from my ISP? Because, I am not using DHCP on my internal network. If it is the client on Mandrake Security it is strange that it worked in RC1 but not in RC2. Oh well, I'll try SNF and see if maybe there is a change. Thank you for your help. Stephen W. Thomas Network Engineer Technical Software Services [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: Florin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 05, 2001 9:42 PM To: [EMAIL PROTECTED] Subject: Re: [Cooker-firewall] WWW Access fails Thomas, Stephen W-CONT [EMAIL PROTECTED] writes: This is the same person, just answering from work. Anyway, you asked if I can ping the addresses, yes I can. Web access is the only thing that sufferes. My son plays some of the mud games (Telnet) and he continues to work fine when the web access is having problems. This tells me that it is something to do with the http(s) protocol. I did notice, this morning, that I would get constant packet deny's in the logs when this happens. Squid is running in transparen mode. I have the network set to restart snort when I get my new IP from my internet provider. Yes, it is DHCP. I really think it is a problem with the firewall and dial-up that uses dhcp. I have tried disabling snort and squid and the problem doesn't go away. I even tried disabling the firewall when the problem was occuring but I still had to reboot the system in order for the problem to go away. Is there more info that you need? I'll be happy to send logs or whatever. I really like Mandrake Security and want it to be very succesfull. I just think that if I am having this problem other people may have the same problem. My setup is not that different. It is a basic system and a dial-up provider. I use Bellsouth in the United States which is a very big internet provider. Hi again, ok, the problem may come from your dhcp client. You could try one of the following: dhcpcd, pump, dhcpxd, dhcp-client. Uninstall the useless ones or configure to use the one you like. cheers, -- Florin http://www.mandrakesoft.com
RE: [Cooker-firewall] WWW Access fails
This is the same person, just answering from work. Anyway, you asked if I can ping the addresses, yes I can. Web access is the only thing that sufferes. My son plays some of the mud games (Telnet) and he continues to work fine when the web access is having problems. This tells me that it is something to do with the http(s) protocol. I did notice, this morning, that I would get constant packet deny's in the logs when this happens. Squid is running in transparen mode. I have the network set to restart snort when I get my new IP from my internet provider. Yes, it is DHCP. I really think it is a problem with the firewall and dial-up that uses dhcp. I have tried disabling snort and squid and the problem doesn't go away. I even tried disabling the firewall when the problem was occuring but I still had to reboot the system in order for the problem to go away. Is there more info that you need? I'll be happy to send logs or whatever. I really like Mandrake Security and want it to be very succesfull. I just think that if I am having this problem other people may have the same problem. My setup is not that different. It is a basic system and a dial-up provider. I use Bellsouth in the United States which is a very big internet provider. Stephen W. Thomas Network Engineer Technical Software Services [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: Florin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 05, 2001 4:07 PM To: [EMAIL PROTECTED] Subject: Re: [Cooker-firewall] WWW Access fails Stephen Thomas [EMAIL PROTECTED] writes: Is anyone else having a problem with the WWW access failing? My system runs fine for a couple of days at a time and then it just stops allowing access to web pages. Telnet, FTP, and everything else seems to continue to work fine. I can't even get to the Firewall configuration web. (https://192.168.x.x:8443) This has been happening ever since the last release. My system is a dial-up and my provider kicks me off every twelve hours. I am running squid but do not have any sites banned. I am also running snort. I am not running dhcp. There is nothing in the logs about any errors. When I try to go to an external site I get the error from Konqueror: Could not connect to host www.mandrake.com When I try to connect to the firewall configuration program I get: The process for the https://192.168.x.x protocol died unexpectedly. I have tried stopping squid but that doesn't fix the problem. The only way to fix it is to reboot the firewall. I will try running it without squid and see if that fixes it. Hi there, we talked about similar problems in some older questions. You didn't say the mode in which squid is running. Also, if your provider kicks you off every twelve hours that means that your internet network interface will be down every 12 hours (is it with dhcp IP ?) and therefore you should restart snort. can you ping any of the network cards from within your inside network. I don't have enough information, so how could I help ? cheers, -- Florin http://www.mandrakesoft.com
RE: [Cooker-firewall] Mandrake shakeup?
Go here: http://www.mandrakesoft.com/company/press/pr?n=/pr/business/890 and get the information from the source Mandrake. Stephen W. Thomas Network Engineer Technical Software Services http://www.techsoft.com -Original Message- From: Art Mason [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 22, 2001 1:57 PM To: [EMAIL PROTECTED] Subject: [Cooker-firewall] Mandrake shakeup? How true is this? http://www.newsforge.com/article.pl?sid=01/05/22/009242mode=thread And if so, how does this affect the future of MandrakeSecurity? It'd be a shame to see a distro like this w/ such great potential go down the drain because of some corporate desk jockeys w/o a clue as to what a great distro Linux-Mandrake has become. Just my thoughts. -- Art Mason Technology Coordinator La Pryor Independent School District (830) 365-4016
