[leaf-user] Upgrading to new version of Bering-U on WRAP box

2006-02-13 Thread M Lu

Hello,

I would like to upgrade my oldder version of BeringU to a newer on WRAP box 
and I use syslinux to boot. Is there any good and safe way to do that 
without opening the box and removing the CF. I am afraid that during the 
upgrade I may do something stupid and the box would not boot anymore.


Thank you for your suggestions.







---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


Re: [leaf-user] Upgrading to new version of Bering-U on WRAP box

2006-02-13 Thread M Lu
I should add that I have 256M CF, so there is plenty of room for new /old 
files if needed.



- Original Message - 
From: "M Lu" <[EMAIL PROTECTED]>

To: 
Sent: Monday, February 13, 2006 5:38 PM
Subject: [leaf-user] Upgrading to new version of Bering-U on WRAP box



Hello,

I would like to upgrade my oldder version of BeringU to a newer on WRAP 
box and I use syslinux to boot. Is there any good and safe way to do that 
without opening the box and removing the CF. I am afraid that during the 
upgrade I may do something stupid and the box would not boot anymore.


Thank you for your suggestions.




---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


Re: [leaf-user] Upgrading to new version of Bering-U on WRAP box

2006-02-13 Thread Eric Spakman
Hello M,

Yes there is a good and safe way using pxe, look at the pxeinstall part of:
http://leaf.sourceforge.net/doc/guide/buci-ide.html
There is also a link to the pxeinstall.tgz tool in that document.

If you already have BeringU installed on that box, you can also just scp
all the new packages and kernel to the CF. There is no easy upgrade path
(yet), but as long as you use initrd_ide.lrp (rename to initrd.lrp) and
set the contents of leaf.cfg and syslinux.cfg correct it will boot. For
login you have to change /etc/inittab in etc.lrp before copying to the CF,
rename to etc.tar.gz, unpack, uncomment the T0:... line and set the speed
to 38400 (if that's your default), and repack again. But if your current
BeringU installation is not that old, you can probably use your current
etc.lrp.

Eric

> Hello,
>
>
> I would like to upgrade my oldder version of BeringU to a newer on WRAP
> box and I use syslinux to boot. Is there any good and safe way to do that
> without opening the box and removing the CF. I am afraid that during the
> upgrade I may do something stupid and the box would not boot anymore.
>
> Thank you for your suggestions.
>
>
>
>
>
>
>
>
> ---
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
> files for problems?  Stop!  Download the new AJAX search engine that makes
>  searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>
>




---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


Re: [leaf-user] ipsec/openswan 2.4.2

2006-02-13 Thread cpu memhd
Hello Arne,

I don't understand openswan 2.x. It doesn't have SHA2 (which I use).
Can't
modularize ciphers; no blowfish (missing usual ALGs). I tried using
cryptoapi's sha512 but that didn't work. I tried searching the openswan
mailing list, found a couple of similar concerns, but no answers.
Perhaps
I'm asking some dumb questions? I've downgraded to 1.0.9 on kernel
2.4.32.
Effectively, a 2.4 ucBering hybrid.

Here are the offending config lines:

2.4.32:

CONFIG_KLIPS=m
#
# IPsec options (Openswan)
#
CONFIG_KLIPS_IPIP=y
CONFIG_KLIPS_AH=y
CONFIG_KLIPS_ESP=y
CONFIG_KLIPS_ENC_3DES=y
CONFIG_KLIPS_ENC_AES=y
CONFIG_KLIPS_AUTH_HMAC_MD5=y
CONFIG_KLIPS_AUTH_HMAC_SHA1=y
CONFIG_KLIPS_ALG=y
# CONFIG_KLIPS_IPCOMP is not set
CONFIG_KLIPS_DEBUG=y
CONFIG_IPSEC_NAT_TRAVERSAL=y

2.4.31 (the more familiar):

CONFIG_IPSEC=m
#
# IPSec options (FreeS/WAN)
#
CONFIG_IPSEC_IPIP=y
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AUTH_HMAC_MD5=y
CONFIG_IPSEC_AUTH_HMAC_SHA1=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ENC_3DES=y
CONFIG_IPSEC_ALG=y
CONFIG_IPSEC_ALG_MD5=m
CONFIG_IPSEC_ALG_SHA1=m
CONFIG_IPSEC_ALG_SHA2=m  <-- look sha2
CONFIG_IPSEC_ALG_3DES=m
CONFIG_IPSEC_ALG_AES=m
CONFIG_IPSEC_ALG_BLOWFISH=m  <-- and all
CONFIG_IPSEC_ALG_TWOFISH=m   <-- these
CONFIG_IPSEC_ALG_SERPENT=m   <-- other
CONFIG_IPSEC_ALG_CAST=m  <-- ciphers
CONFIG_IPSEC_ALG_NULL=m
# CONFIG_IPSEC_ALG_CRYPTOAPI is not set
# CONFIG_IPSEC_ALG_1DES is not set
CONFIG_IPSEC_IPCOMP=y
CONFIG_IPSEC_DEBUG=y
CONFIG_IPSEC_NAT_TRAVERSAL=y


Any thoughts on getting strongswan to work with ucBering?

Arne Bernin wrote:
> Hi all,
> 
> i just finished packaging openswan 2.4.2 for bering-uclibc and did
some 
> initial testing, i am just wondering if someone else is using 
> openswan/ipsec and is willing to test it, too.
> 
> --arne
> 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


[leaf-user] shorewall "Connection Tracking Match: Not available"

2006-02-13 Thread cpu memhd
With iptables 1.3.4, shorewall (2.4.7) reports connection tracking is
not 
available.

I checked /usr/share/shorewall/firewall and found this line:

qt $IPTABLES -A fooX1234 -m conntrack --ctorigdst 192.168.1.1 -j ACCEPT

   && CONNTRACK_MATCH=Yes

Under 1.3.4 the above iptables command returns 127; 1.3.1 returns 0.
-cpu

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


[leaf-user] openssh - buildtool can't compile unless...

2006-02-13 Thread cpu memhd
...you get rid of this line in buildtool.mk:

--without-opensc

This appears to be an old problem not related to ucbering. I did not
save 
my log messages so I can't report the errors, unfortunately.
-cpu

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


[leaf-user] mawk - depends on bison

2006-02-13 Thread cpu memhd
Using buildtool, mawk won't compile unless bison is installed. Under most 
circumstances, shouldn’t buildtool handle dependencies?

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/