December 1999 - SUSE Proxy Suite - openSUSE Mailing Lists

logs
by Arkady A Drovosekov 23 Dec '99

23 Dec '99

Hi, how do you get transfer logs from proxy? it always try first unlink existing logfile. -- Best regards, Arkady

2 1

SO_REUSEADDR bug in FTP-Proxy (from Rogier Wolff)
by Volker Wiegand 11 Dec '99

11 Dec '99

Hi, the following patch was posted from Rogier Wolff, but the Mailing List Daemon refused to accept it. We are crrently fixing the posting problem, and here is his posting. Volker ---------- Forwarded message ---------- Date: Fri, 10 Dec 1999 14:09:30 +0100 (MET) From: Rogier Wolff <R.E.Wolff(a)BitWizard.nl> To: proxy-suite-owner(a)suse.com Subject: failure notice (fwd) Hi, When the data port for connections to the server is specified as 41000 - 41999, there will always be a data connection between realserver:20 and proxyserver:41000, as the ftp-proxy always uses the lowest possible port. Some ftp-servers don't seem to like this. They end up refusing to build a dataconnection half of the time. (i.e. first request works, second request doesn't, and so forth). I observed this on an old Red Hat system, probably still running a 2.0 kernel (just checked: Yes, its 2.0.32). Now you know why this system should really be behind the firewall. Anyway, I've modified the ftp-proxy to start looking for a free port at a random position in the range. This reduces the problem from occurring 50% of the time to 0.05% of the time. (range is 1000 entries). This is acceptable, as the retry will simply work. Roger. diff -ur proxy-suite-1.7.orig/common/com-misc.c proxy-suite-1.7/common/com-misc.c --- proxy-suite-1.7.orig/common/com-misc.c Fri Oct 22 11:29:01 1999 +++ proxy-suite-1.7/common/com-misc.c Fri Dec 10 12:47:11 1999 @@ -643,6 +643,17 @@ #endif } +int misc_rand (int lrng, int urng) +{ + struct timeval t; + + if (lrng == urng) return lrng; + + gettimeofday (&t, NULL); + srand (t.tv_usec); + return (lrng + (rand () % (urng - lrng + 1))); +} + /* ------------------------------------------------------------ * $Log: com-misc.c,v $ diff -ur proxy-suite-1.7.orig/common/com-socket.c proxy-suite-1.7/common/com-socket.c --- proxy-suite-1.7.orig/common/com-socket.c Fri Oct 22 11:29:01 1999 +++ proxy-suite-1.7/common/com-socket.c Fri Dec 10 12:49:21 1999 @@ -1163,6 +1163,7 @@ { struct sockaddr_in saddr; int sock; + int i; u_int16_t port; if (phls == NULL || ctyp == NULL) /* Sanity check */ @@ -1181,17 +1182,22 @@ saddr.sin_addr.s_addr = htonl(addr); saddr.sin_family = AF_INET; + /* ** Bind the socket, taking care of a given port range. ** Note: this function covers also lrng = urng = 0 ... + ** + ** Note: To prevent problems with reuseing portnos too quickly + ** we start at a random point inside the range. */ - for (port = lrng; port <= urng; port++) { + for (i=0,port = misc_rand (lrng, urng);i < (urng-lrng); i++,port++) { saddr.sin_port = htons(port); if (bind(sock, (struct sockaddr *) &saddr, sizeof(saddr)) == 0) break; if (errno != EADDRINUSE) - port = urng + 1; + i = urng-lrng + 1; + if (port >= urng) port = lrng; } if (port > urng) { /* nothing found? */ close(sock); -- ** R.E.Wolff(a)BitWizard.nl ** http://www.BitWizard.nl/ ** +31-15-2137555 ** *-- BitWizard writes Linux device drivers for any device you may have! --* "I didn't say it was your fault. I said I was going to blame it on you."

2 4

failure notice (fwd)
by R.E.Wolff＠BitWizard.nl 11 Dec '99

11 Dec '99

I subscribed about an hour ago. It seems as if the "subscribe" deamon got my official addres (r.e.wolff(a)bitwizard.nl) and this one uses my "unofficial" address (wolff(a)bitwizard.nl). Roger. ----- Forwarded message from MAILER-DAEMON(a)suse.com ----- >From MAILER-DAEMON Fri Dec 10 11:58:35 1999 Delivered-To: wolff(a)cave.bitwizard.nl Date: 10 Dec 1999 11:54:30 -0000 From: MAILER-DAEMON(a)suse.com To: wolff(a)cave.bitwizard.nl Subject: failure notice Hi. This is the qmail-send program at suse.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <proxy-suite(a)lists.suse.com>: Sorry, only subscribers may post. If you are a subscriber, please forward this message to proxy-suite-owner(a)suse.com to get your new address included (#5.7.2) --- Below this line is a copy of the message. Return-Path: <wolff(a)cave.bitwizard.nl> Received: (qmail 18225 invoked from network); 10 Dec 1999 11:54:30 -0000 Received: from unknown (HELO suse.com) (216.88.157.2) by host1.colo.suse.com with SMTP; 10 Dec 1999 11:54:30 -0000 Received: (qmail 21003 invoked by alias); 10 Dec 1999 12:54:01 -0000 Delivered-To: proxy-suite(a)suse.com Received: (qmail 20993 invoked from network); 10 Dec 1999 12:54:00 -0000 Received: from unknown (HELO rosie.bitwizard.nl) (212.64.77.146) by home.suse.com with SMTP; 10 Dec 1999 12:54:00 -0000 Received: from cave.bitwizard.nl (root(a)cave.bitwizard.nl [192.168.234.1]) by rosie.bitwizard.nl (8.8.8/8.8.8) with ESMTP id MAA06236 for <proxy-suite(a)suse.com>; Fri, 10 Dec 1999 12:58:25 +0100 Received: (from wolff@localhost) by cave.bitwizard.nl (8.9.3/8.9.3) id MAA16983 for proxy-suite(a)suse.com; Fri, 10 Dec 1999 12:58:24 +0100 Message-Id: <199912101158.MAA16983(a)cave.bitwizard.nl> Subject: No regex: compile error.... To: proxy-suite(a)suse.com Date: Fri, 10 Dec 1999 12:58:24 +0100 (MET) From: R.E.Wolff(a)BitWizard.nl (Rogier Wolff) X-Mailer: ELM [version 2.4ME+ PL60 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Hi, It seems that "HAVE_REGEX" doesn't turn on automatically on my SuSE 6.2 system. Moreover, if you don't have regex, it doesnt' compile..... (One more patch to follow, but I'm going to actually TRY that one before submitting it... ) diff -ur proxy-suite-1.7.orig/ftp-proxy/ftp-cmds.c proxy-suite-1.7/ftp-proxy/ftp-cmds.c --- proxy-suite-1.7.orig/ftp-proxy/ftp-cmds.c Fri Oct 22 11:29:01 1999 +++ proxy-suite-1.7/ftp-proxy/ftp-cmds.c Fri Dec 10 12:53:33 1999 @@ -371,6 +371,7 @@ for (cmd = cmdlist; cmd->name != NULL; cmd++) { if (strcasecmp("USER", cmd->name) != 0) continue; +#ifdef HAVE_REGEX if (cmd->regex == NULL) break; if ((p = cmds_reg_exec(cmd->regex, arg)) != NULL) { @@ -383,6 +384,7 @@ ctx->cli_ctrl->peer, p); return; } +#endif break; } Roger. -- ** R.E.Wolff(a)BitWizard.nl ** http://www.BitWizard.nl/ ** +31-15-2137555 ** *-- BitWizard writes Linux device drivers for any device you may have! --* "I didn't say it was your fault. I said I was going to blame it on you." ----- End of forwarded message from MAILER-DAEMON(a)suse.com ----- -- ** R.E.Wolff(a)BitWizard.nl ** http://www.BitWizard.nl/ ** +31-15-2137555 ** *-- BitWizard writes Linux device drivers for any device you may have! --* "I didn't say it was your fault. I said I was going to blame it on you."

2 1

Multiple instances of ftp-proxy
by Ilja Pavkovic 11 Dec '99

11 Dec '99

Hi, I have a setup where I have to protect several servers in the intranet. Is it possible to start 2 or more instances of ftp-proxy? What are possible restrictions? Ilja Pavkovic

2 3