Re: [Leaf-devel] Antivirus and other issues
On Tue, 2002-07-09 at 14:54, Jaime Nebrera Herrera wrote: We are developing an antivirus gateway based on Leaf Bering. Right now we have been able to acomplish the following: Jaime, This sounds interesting. Please keep us informed of your progress. 1) Using emailrelay (http://emailrelay.sourceforge.net) we have been able to implement an smtp gateway. Have you looked into using SpamAssassin at SMTP time? Exim SpamAssassin at SMTP time http://marc.merlins.org/linux/exim/sa.html Well this is it. All the code is GPL (besides antivirus engines of course). Please, tell us if we can use some kind of download area. You may follow the instructions on or contributions page, or contact me off list about joining our project. Note: we can't host commercial software on SourceForge. http://leaf-project.org/mod.php?mod=userpagemenu=16page_id=22 -- Mike Noyes [EMAIL PROTECTED] http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Antivirus and other issues
Hi Mike, Jaime, This sounds interesting. Please keep us informed of your progress. We will surelly do it. 1) Using emailrelay (http://emailrelay.sourceforge.net) we have been able to implement an smtp gateway. Have you looked into using SpamAssassin at SMTP time? Exim SpamAssassin at SMTP time http://marc.merlins.org/linux/exim/sa.html Well there are two problems: 1) We prefer not to use Perl as long as we can 2) We are trying to do this without a real MTA. I mean, this should run without the need for a HDD so most MTA wont conform to SMTP RFC if some kind of HDD is not present (you know, you can loose the mail if a powerdown occurs). Emailrelay only confirms reception once it has received it himself so this doesnt apply. But YES we are seeking for some kind of SPAM control too. But one step at a time, we have achieved virus, now are trying anti relay, next ... Well this is it. All the code is GPL (besides antivirus engines of course). Please, tell us if we can use some kind of download area. You may follow the instructions on or contributions page, or contact me off list about joining our project. Note: we can't host commercial software on SourceForge. http://leaf-project.org/mod.php?mod=userpagemenu=16page_id=22 Surely, the commercial side will be left out but we will give clear instructions of how to install such application. For example, we will build fprot_needed.lrp with all the parts that are open and then give instructions of how to glue the propietary parts, lets say: download from X, unpack, take the file Y.exe put it in Z directory, save your package. This will be done for every AV engine we achieve to work by (for example fprot and AVP). Also many people could ask why not using an open AV (openantivirus). The engine could be OK (we have not tested) but the viri database and fast updates are even more important and this is something an open project is not able to do offer right now. We are going to take a week holliday break. We will contact you with all our work as soon as we return. Regards. -- Jaime Nebrera Herrera [EMAIL PROTECTED] --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
[Leaf-devel] Converting Documentation to DocBook - progress report
Hi All I've been getting on quite nicely with converting David Douhitt's developers guide to DocBook XML - almost finished now. I hit a few snags getting a decent XML/Docbook development environment together. I'll spare you the long story - suffice to say this has taught me as much about Mac OS X as it has about DocBook, Linux and LEAF development, and I enjoyed it! I've a few questions. 1. What should I do about version numbering? I've been careful not to change the text in any substantial way so going all the way from 1.2 to 1.3 wouldn't seem right, but I'll need to put something in the revision history. Any ideas? 2. The DocBook documents will need converting to other more usable formats for distribution/posting on the site. I know XML is supposed to be directly supported by modern browsers, but I tried this and it didn't work very well, so I don't think it's a very good option really - I think DocBook is a bit too complex for that kind of thing. So what formats do we want? (X)HTML seems like the obvious choice to me. Anything else though? 3. I've never used CVS - will I need to use it to submit my completed documents? Finally, I'll soon want to know what document I should attempt next. Nominations please! :-) cheers Julian -- [EMAIL PROTECTED] www.ljchurch.co.uk --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Affiliates
On Mon, 2002-07-08 at 15:45, guitarlynn wrote: On Monday 08 July 2002 08:55, Mike Noyes wrote: Corporate Affiliates proposal: I'd like us to start affiliating with corporations. However, I'm unsure of the point where we should consider a company for affiliation. Do they need to provide code resources and a link back to us for consideration, or just a link back to us? Examples: *Echogent: fwlog.pl cgi-script, Echowall, ftp white paper, Scott Best is a project member. * SeSame: Mosquito image, various packages, Webadmin, and reciprocal link. * Bits Over Atoms: Reciprocal link to us. Lynn, Thanks for the feedback. :-) I was hoping these proposals would generate more discussion than they have. I'd really appreciate additional feedback from our project members. I don't want to start affiliating with companies or create a consultants list, if it's going to upset our project members. If they're gleaning LEAF GPL'ed code and charging for it, it would seem fair (fill in the blank). :-( Would you elaborate on this? How does it apply to the corporate affiliation idea above? Paying for Consulting and site setup is fine with me (I do a little of this), but sale of the software (and in particular closing of code) is quite another, IMHO. Agreed. Licenses should be followed. Consultant List proposal: I'd like us to create a web page with links or contact information of consultants willing to contract for LEAF installations. Should we use the linuxports.com site for listings, or something else? This sounds good to me. I really don't know how consultants could be qualified by the project though. It could be rather easy to get over your head in a short-term project. I'm not proposing certification by our project of consultants. I think a list consultants willing to work on LEAF release/branch release would be useful to our users. It may also help some of our project members bring in some additional revenue. -- Mike Noyes [EMAIL PROTECTED] http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
RE: [Leaf-devel] Affiliates
I definitely have opinions on all of this but have been waiting to see the response from others as I am the most junior involved. From: Mike Noyes [mailto:[EMAIL PROTECTED]] Sent: Fri 7/12/2002 10:31 AM I'm not proposing certification by our project of consultants. I think a list consultants willing to work on LEAF release/branch release would be useful to our users. It may also help some of our project members bring in some additional revenue. I think this is a great idea but agree that it would be complicated and dangerous for the project to get involved with any kind of certification or even indication of skills involved. It should be made clear that both parties involved in any transaction are fully responsible for any verification desired/needed. A good concise disclaimer should take care of this issue. Richard N¬±ùÞµéX¬²'²Þu¼)ä礧`zÛ i÷Þw²«¶ÇîËn}øm¶ÿ¶§ÊþÇËy§Ýz÷¥¨¥x%ËKy§Ýz÷¥+-²Ê.Ç¢¸ ëa¶Úlÿùb²Û,¢êÜyú+éÞ·ùb²Û?+-wèþW}ׯz
[Leaf-devel] LEAF Dev Environment
I have been working on setting up a good working environment for my LEAF work, which primarily involves sh-httpd and Weblet, VMWare is an option if I move to 1.44 disks and change a few things (havenât tried it yet). I also know that UML is a good option as I have Mandrake at home, but Iâm wishing for more portability. Last night I tried to setup a Cygwin system. I tried to get sh-httpd to work but could not figure out the problem. I suspect it my be my lack of true understanding of what exactly Cygwin is and does. Any one out there gone down this road? Richard Amerman N¬±ùÞµéX¬²'²Þu¼)ä礧`zÛ i÷Þw²«¶ÇîËn}øm¶ÿ¶§ÊþÇËy§Ýz÷¥¨¥x%ËKy§Ýz÷¥+-²Ê.Ç¢¸ ëa¶Úlÿùb²Û,¢êÜyú+éÞ·ùb²Û?+-wèþW}ׯz
Re: [Leaf-devel] LEAF Dev Environment
I have been working on setting up a good working environment for my LEAF work, which primarily involves sh-httpd and Weblet, VMWare is an option if I move to 1.44 disks and change a few things (haven’t tried it yet). I also know that UML is a good option as I have Mandrake at home, but I’m wishing for more portability. Last night I tried to setup a Cygwin system. I tried to get sh-httpd to work but could not figure out the problem. I suspect it my be my lack of true understanding of what exactly Cygwin is and does. Any one out there gone down this road? I use cygwin, but haven't tried using it with sh-httpd. Cygwin is basically a unix shell environment for windows, including the familiar bash shell, and most common unix/gnu utilities (from sed grep to gcc). The problem with running sh-httpd in this environment is sh-httpd needs to be launched by inetd, the internet service super daemon. I'm not sure if there's an easy way to do this from within windows (even using cygwin)...if you figure something out, let us know. Of course you could always do something like: cat /path/myhtmlquery | sh-httpd response.html which while handy when debugging sh-httpd, is not too useful when trying to play with weblet pages (actually loading it up in a browser is a *MUCH* easier way to debug web content). HTH Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
RE: [Leaf-devel] LEAF Dev Environment
From: Charles Steinkuehler [mailto:[EMAIL PROTECTED]]
Sent: Fri 7/12/2002 12:45 PM
The problem with running sh-httpd in this environment is sh-httpd needs
to be launched by inetd, the internet service super daemon. I'm not
sure if there's an easy way to do this from within windows (even using
cygwin)...if you figure something out, let us know.
One of the installable packages for cygwin includes inetd, it looks like it is just a
matter of getting it to work.
Of course you could always do something like:
cat /path/myhtmlquery | sh-httpd response.html
Something to try for sure.
which while handy when debugging sh-httpd, is not too useful when trying
to play with weblet pages (actually loading it up in a browser is a
*MUCH* easier way to debug web content).
At work I have it easy, a dedicated network connected directly to the Inet just for
LEAF work. I have three machines on it curently, the LEAF box, a client on the
inside, and a client on the outside for VPN setup testing.
I'm trying to set things up so that I can work on this stuff on the road with my
laptop or at home
Richard Amerman
áË ë^¨¥Ë)¢{(ç[É8bAzAv±Æ}è§zÛ!»l~éì¶çßÛiÿûay
yé ¢oì|·}ׯzYX§X¬´·}ׯzYb²Û,¢êÜyú+éÞ¶m¦Ïÿ+-²Ê.Ç¢¸ ë+-³ùb²Ø§~åy§Ýz÷¥
[Leaf-devel] can't login
Hi, I've been making .lrp's touching rsyncing dding calling remote hands to swap floppies and reboot *all* day, so please forgive me if I've missed something obvious. There doesn't seem to be any /bin/sh in Bering rc3? Should /etc/passwd read /bin/tinylogin for root??? Also I'm getting these every 10 seconds Jul 12 21:25:40 firewall /sbin/getty[31530]: /dev/tty1: cannot open as standard input: Operation not supported by device Jul 12 21:25:40 firewall /sbin/getty[31531]: /dev/tty2: cannot open as standard input: Operation not supported by device I guess because there is no keyboard? I don't really want to comment out the mgetty lines in /etc/inittab because I might use this image with a keyboard. Does the message really need to be logged by syslogd? What's the best way to blank it without preventing some other important messages? The permissions on /root/ aren't 700, can that be fixed? Thanks, // George -- GEORGE GEORGALIS, System Admin/Architectcell: 347-451-8229 Security Services, Web, Mail,mailto:[EMAIL PROTECTED] File, Print, DB and DNS Servers. http://www.galis.org/george --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Affiliates
On Friday 12 July 2002 12:31, Mike Noyes wrote: On Mon, 2002-07-08 at 15:45, guitarlynn wrote: Lynn, Thanks for the feedback. :-) I was hoping these proposals would generate more discussion than they have. I'd really appreciate additional feedback from our project members. I don't want to start affiliating with companies or create a consultants list, if it's going to upset our project members. Agreed, and my opinion certainly doesn't necessarily reflect anyone else's opinion. If they're gleaning LEAF GPL'ed code and charging for it, it would seem fair (fill in the blank). :-( Would you elaborate on this? How does it apply to the corporate affiliation idea above? Personally, I would be against something similar to a company taking a LEAF CD/IDE release, putting a closed-source web-configuration application on it, and selling it unless a large amount of the core distribution was also re-written. I am against adding one or two packages to a stock GPL'ed release and selling it as opposed to simply selling the package that they are offering. The current development of anti-virus/email-scanning for commercial use is an example of something that is fine with me they are selling their own code/package. IPNuts is quite fairly an entity of it's own right and the core is a highly modified LRP 2.9.8, which allows them the right to use it commercially (IMHO). My original concerns where over their use of LEAF VPN packages (IPSec, PPTP, CIPE, etc...) only on their for-sale releases and promoting these packages with web-configuration as the reason to buy it. If I interpreted the response correctly, they are not using LEAF VPN packages, but rather some other closed-source VPN program instead. My other concern(s), is their use of incorperating Bering and Dachstein IDE, CD-ROM, and wireless code into the sale-only products w/o making a similar product available for free (only the floppy is free and not in development anymore as I understand it). Any concerns over the use of Dachstein and Bering code in this way should be expressed by the respective authors. In closing, if your planning to sell code, then write it and sell what is yours (or largely yours) to sell. If your not planning to write much code, but need to make money, do it with consulting and the labor that you personally put in. I've sold a bit of consulting and LEAF installs, but never once have I thought of charging for the software. -- ~Lynn Avants aka Guitarlynn guitarlynn at users.sourceforge.net http://leaf.sourceforge.net If linux isn't the answer, you've probably got the wrong question! --- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
[Leaf-devel] is Bering GNU?
Is Bering GNU? I'm beginning to have my doubts. Where is /usr/src/linux/.config? Where are the other compile time options for other binaries? Just how was Bering_1.0-rc3_img_bering_1680.bin made? After spending a good part of a week, and _all_ day Friday getting up a Bering router before a deadline -- subsequently missing the first day of a conference http://h2k2.org -- I looked back at what was the problem. I discovered I was hacking around a product (the Bering image) much like the manner of before I used Linux. I have this disk image, that I mount to find, compressed archives, containing finely tailored scripts and a handful of binaries. Together they make up the GNU Bering. (And maybe other leaf versions as well.) I have hunted all over http://leaf-project.org and http://leaf.sourceforge.net/ for the source, or even a file that says version xx.yy.zz of busybox was compiled with the following patch and compile time options. Or maybe a tgz of the /usr/local/src/bering where the image was made? Nothing. I find myself writing scripts to extract and compress lrp files. Surely everyone doesn't gzip -c9 what they made by tar cf after mounting and extracting their first floppy image? Is this the intended way to indoctrinate new developers to the old school? I even asked a few well read LUG groups what the lrp format was, or how I could run the lrcfg that I read about without actually booting the distro. Nobody knew because the design is not conducive to group development, it's intended use is like that of proprietary software -- take the binary, configure it with the configuration menu and be like everyone else. Okay, I just found the developer.rtf and scanned the whole thing. Formidable task, but I only see part of the forest and none of the trees. I already know linux and there seem to be some very specific LRP details in there, but will it be done before it's out of date? I'm not saying produce a `./configure make make image` but if the environment for building the release was published, or easier to find, I'm sure there would be a lot more community support. At one point I kicked myself for not looking in CVS before, but when I got in there, was in disbelief -- no source, only doc. So now I have problems with my image to resolve, why do those Belkin cards detect as reltek under RH but, none of the Bering modules will work with them??? How will I ever get my tulips back from my boss so I can test an image at home? What am I going to do about making an image and quickly changing a few parameters (ssh host keys, network, firewall and other site information) or major structure (LaBera, ppp, ipsec, dns) without spending a ton of time hand extracting and compressing components? I'm going to make my own distribution. reBering. Complete with scripts to mount and extract all the subcomponents, global configure, mix'n'match packages, compress and unmount. Only I don't think I can call it GNU because since I'm in a hurry, I won't have time to reverse engineer the compile time options and source. I'd rather work on putting it on an eprom anyway. In all sincerity, Bering is very cool. It could just be a lot better if it was more in the spirit of _encouraging_ open source development rather than barley qualifying, actually I bet if it was audited, it wouldn't pass. If there are scripts to tar and gzip a lrp package, why aren't they part of a tools.tgz right beside package_src.tgz and compile_configs.tgz next to the Leaf_UML packages and extraction instructions for odd archives? I know asking for doc is a lot, but maintaining a file of command lines used to make the binaries from source would be an excellent first step. // George -- GEORGE GEORGALIS, System Admin/Architectcell: 347-451-8229 Security Services, Web, Mail,mailto:[EMAIL PROTECTED] File, Print, DB and DNS Servers. http://www.galis.org/george --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
