Re: [Leaf-devel] Bering v1.0-rc3: an update
Jacques, Looks like there is some problem with the shorewall 1.3.2 that defaults to the /var/lib/shorewall directory. I added /var/lib/shorewall/functions /var/lib/shorewall/firewall /var/lib/shorewall/version and i added the above to shorwall.list I also ln -s /var/lib/lrpkg/shorwal.version /var/lib/shorewall/version regards, jim mcdonagh On Wednesday 19 June 2002 02:31 pm, Jacques Nilo wrote: Hi Folks! I just fixed to problems with v1.0-rc3: 1/ The user's guide should now be OK for download in pdf format. 2/ I have prepared the 1.3.2 version of shorewall. This version includes both errata introduced by Tom for 1.3.1 plus some other features. Bering rc3 was released with the first errata only, so you are encouraged to upgrade. Check: http://leaf.sourceforge.net/devel/jnilo/bering/update/ (Note: this new version of shorewall can be applied to any post rc1 Bering release) The new features of Shorewall 1.3.2 are described in the news section of Tom's web site. http://www.shorewall.net Jacques --- - Bringing you mounds of caffeinated joy http://thinkgeek.com/sf ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel _ This inbound message has been scanned for all viruses by the MessageLabs SkyScan AV service. For more information on a higher level of virus protection please visit http://www.mcdonagh.com/networks/messagelabs.asp. --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Bering v1.0-rc3: an update
Le Jeudi 20 Juin 2002 19:35, jim mcdonagh a écrit : Jacques, Looks like there is some problem with the shorewall 1.3.2 that defaults to the /var/lib/shorewall directory. I added /var/lib/shorewall/functions /var/lib/shorewall/firewall /var/lib/shorewall/version and i added the above to shorwall.list I also ln -s /var/lib/lrpkg/shorwal.version /var/lib/shorewall/version regards, jim mcdonagh Yes for some reason still unclear to me /var/lib/shorewall directory is not backuped by lrcfg. The fix is to replace var/lib/shorewall by var/lib/shorewall/ in /var/lib/lrpkg/shorwall.list Then everything will be backuped OK. I still have to understand this :-) Might be related to the new gzip code in bbox 0.60.3. In the meanwhile, the shorwall.lrp package in /bering/update has been updated with the above mentionned fix Jacques --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Bering v1.0-rc3: an update
Yes i noticed that. I had to put in the complete file name. Could it be because there is is a line in root.exclude.list of /var/lib/shorewall? -jim On Thursday 20 June 2002 01:08 pm, Jacques Nilo wrote: Le Jeudi 20 Juin 2002 19:35, jim mcdonagh a écrit : Jacques, Looks like there is some problem with the shorewall 1.3.2 that defaults to the /var/lib/shorewall directory. I added /var/lib/shorewall/functions /var/lib/shorewall/firewall /var/lib/shorewall/version and i added the above to shorwall.list I also ln -s /var/lib/lrpkg/shorwal.version /var/lib/shorewall/version regards, jim mcdonagh Yes for some reason still unclear to me /var/lib/shorewall directory is not backuped by lrcfg. The fix is to replace var/lib/shorewall by var/lib/shorewall/ in /var/lib/lrpkg/shorwall.list Then everything will be backuped OK. I still have to understand this :-) Might be related to the new gzip code in bbox 0.60.3. In the meanwhile, the shorwall.lrp package in /bering/update has been updated with the above mentionned fix Jacques --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel _ This inbound message has been scanned for all viruses by the MessageLabs SkyScan AV service. For more information on a higher level of virus protection please visit http://www.mcdonagh.com/networks/messagelabs.asp. --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Bering v1.0-rc3: an update
On Thu, 20 Jun 2002, jim mcdonagh wrote: Yes i noticed that. I had to put in the complete file name. Could it be because there is is a line in root.exclude.list of /var/lib/shorewall? That's a good point. /var/lib/shorewall has traditionally been used for maintaining state information about the running configuration. There's no need to back up those files. Jacques: You may wish to change the value of STATEDIR in your shorewall.conf to something other than /var/lib/shorewall so that when folks back up the latter, they won't get the state files. Let me know if you would like me to change the value in my copy of the LRP as well; I'm already maintaining a separate shorewall.conf just for LRP anyway. -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Bering v1.0-rc3: an update
Le Jeudi 20 Juin 2002 20:24, Tom Eastep a écrit : On Thu, 20 Jun 2002, jim mcdonagh wrote: Yes i noticed that. I had to put in the complete file name. Could it be because there is is a line in root.exclude.list of /var/lib/shorewall? That's a good point. /var/lib/shorewall has traditionally been used for maintaining state information about the running configuration. There's no need to back up those files. Yes that is why I put long ago (and I forgot about it :-( ) var/lib/shorewall in root.exclude.list. I did not want to change Tom's original package (that is why I did not add an shorwall.exclude.list) and there was indeed no reason to backup the file in /var/lib/shorewall Jacques: You may wish to change the value of STATEDIR in your shorewall.conf to something other than /var/lib/shorewall so that when folks back up the latter, they won't get the state files. So here is the clean solution which should solve everything: 1/ remove the var/lib/shorewall line in /var/lib/lrpkg/root.exclude.list 2/ restore var/lib/shorewall (now the ending / is no more necessary) in /var/lib/lrpkg/shorwall.list 3/ modify shorewall.conf through entry 12 of the shorwall package configuration menu and replace STATEDIR=/var/lib/shorewall by STATEDIR=/tmp/shorewall Tom: is that OK to change that in your LRP package ? 4/ Backup root and shorwall Jacques Let me know if you would like me to change the value in my copy of the LRP as well; I'm already maintaining a separate shorewall.conf just for LRP anyway. -Tom --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [Leaf-devel] Bering v1.0-rc3: an update
On Thu, 20 Jun 2002, Jacques Nilo wrote: So here is the clean solution which should solve everything: 1/ remove the var/lib/shorewall line in /var/lib/lrpkg/root.exclude.list 2/ restore var/lib/shorewall (now the ending / is no more necessary) in /var/lib/lrpkg/shorwall.list 3/ modify shorewall.conf through entry 12 of the shorwall package configuration menu and replace STATEDIR=/var/lib/shorewall by STATEDIR=/tmp/shorewall Tom: is that OK to change that in your LRP package ? Bien sur. 4/ Backup root and shorwall -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
