January 2002 - SUSE Proxy Suite - openSUSE Mailing Lists

ipchains compatibility module
by fchabaud＠free.fr 06 Feb '02

06 Feb '02

Hi, I've downloaded 1.8 proxy-suite and tried to test it agains SuSE 7.2 using a set of rules I have defined. As I use ipchains and SuSE 2.4.4-4GB kernel I had to insert ipchains compatibility module. I was unable to make transparent proxying with proxy-ftp. MagicUser was OK but not transparent connexion. After several tests and recompilation, I tried to install 2.2.19 SuSE kernel and everething became OK without any recompilation nor any reconfiguration. Was this bug (?) of ipchains compatibility module known or is that an incompatibility ? Apart from that I like to set port plages... nice job. -- Florent Chabaud ___________________________________ SGDN/DCSSI/SDS/LTI | florent.chabaud(a)polytechnique.org http://www.ssi.gouv.fr | http://fchabaud.free.fr

1 1

Solaris 8: Dropping Connections, empty directory listings
by Pascal Gienger 28 Jan '02

28 Jan '02

Some of the problems are still there in proxy suite 1.8 built on Solaris 8, newest patchlevel. LDAP-Authentification et.al. are working fine but: I am not able to transfer big files. Sometimes the connection is dropped after 50 kilobytes, sometimes after 170 kilobytes (depends on the "MaxRecvSize" limit). Without a MaxRecvSize Setting or with a too big one, there is no directory listing coming (But still it says Transfer complete). When a connection drops, the following appears in the log file: TECH-INF 'STOR sshd2.tar' sent for 172.25.1.68 TECH-ERR can't ll_read: Cli-Data -1=172.25.1.68 (errno=134 [Transport endpoint is not connected]) USER-INF Transfer for 172.25.1.68: STOR 'sshd2.tar' sent 175104/1 byte/sec Where could I look at? Pascal Gienger

2 2

Problems with solaris 8 running in transparent-proxy mode (SIOCGNATL leads to EINVAL error)
by Christian Rost 24 Jan '02

24 Jan '02

Hi, there seems to be an error in the ioctl-call in com-socket.c. I'm using solaris 8, proxy-suite-1.8 and ip_fil3.4.23. The nat-rule is etablished. When i try to connect, i got the error-message: "can't get ipnat transparent proxy destination" from com-socket.c ipnat -l works fine and shows the source and target-destination. ipnat don't use the ioctl (SIOCGNATL) call! http://www.false.net/ipfilter/2001_06/0579.html describes the same error. Is this possibly a bug in IP Filter ? -- Christian Rost Alter Markt 1-2 Flughafenstr. 52a Baltic Online Computer GmbH 24103 Kiel 22335 Hamburg http://www.baltic-online.de +49-(0)431-54003-0 (33) +49-(0)40-5329939

1 0

User wildcarding broken in 1.8?
by Thomas Bätzler 23 Jan '02

23 Jan '02

Hi, I just started playing around with the new 1.8 ftp-proxy, which I built using "./configure --with-regex" on a linux box. During testing I noticed that wildcarding on user name sections in ftp-proxy.conf didn't work anymore. What I'm trying to do is to have a section like [foo*] DestinationAdress foo-ftp-server in ftp-proxy.conf that would redirect all the users whose user names start with foo to a particular server. This used to work in 1.7TP8 and I've become rather attached to the functionality. Did I miss something duiring configuration, is this a bug or is this intentionally not working anymore? TIA, -- Thomas Bätzler, Network Engineer, Network Operations EMEA Peregrine Systems GmbH web: www.peregrine.com Steinhäuserstraße 22 phone: +49-721-98143-166 D-76135 Karlsruhe / Germany fax: +49-721-98143-196

1 0

Proc Mods Question
by Robert Rottscholl 15 Jan '02

15 Jan '02

Hi Marius, I have a little production system here. Is it safe to turn on proc mods and what advantages do I have? Is it really stable to turn this on? Ciao ;-) Robert

2 1

compile options question
by Robert Rottscholl 15 Jan '02

15 Jan '02

Hi Marius, first I want congratulate for releasing version 1.8. Then I have a question. What compile options are given in the SuSE rpm? I want to compile v1.8 myself and I wonder where to install (and all this stuff like config dir and so on) Ciao ;-) Robert

2 1

proxy-suite-1.8 avaliable
by Marius Tomaschewski 14 Jan '02

14 Jan '02

Hi! I've released a 1.8 version of the proxy-suite - it is avaliable for downloads on: ftp://ftp.suse.com/pub/projects/proxy-suite/src/proxy-suite-1.8.tar.gz == ftp-proxy/NEWS == ==================== * 1.8.0 - released 2002-01-14 ----------------------------------- - implemented transparent proxying support for Linux ipchains/iptables and BSD ipf/ipnat - read description in TransProxy-Mini-Howto.txt - implemented workarround for Netscape (4.x) to access directories via symbolic link (see also new FailResetsPasv config option) - implemented LDAPBindDN and LDAPBindPW simple bind authorization - fixed ld_errno fetching macro to work with openldap 2.x - fixed build-in chroot and uid/gid dropping - now, the whole daemon runs in the chroot; log is written with uid/gid set in config file - fixed socket_gets to wait for a complete line if no EOL found - added MaxRecvBufSiz config option allowing to limit the revc buffer - added LogLevel config option allowing to set the maximal level - extended log messages to provide basic transfer statistics data - extended / improved auto-configure checks for better portability - actualized manual pages, mini-howto's and installation description Kind regards, Marius Tomaschewski <mt(a)suse.de> -- SuSE GmbH, Hamburg --- SuSE Labs, Product Developement PGP public key available: http://www.suse.de/~mt/mt.pgp Fprint: EA 1F 92 75 1A F9 82 07 A1 28 DE 7A 32 E8 97 18

1 0

Was proxy-suite designed to proxy for Internet users into a DMZ?
by Shin Poong 14 Jan '02

14 Jan '02

I have an anonymous FTP server within a DMZ and I'm trying to use proxy-suite to proxy through my firewall and into the DMZ (the proxy-suite sits on my firewall). I haven't had much luck with this. Is this a capability of proxy-suite or am I trying to do something that it wasn't designed to do?

1 0

Blocking sites using proxy-suite
by aditya 08 Jan '02

08 Jan '02

hi! I've set up proxy-suite1.7.tp8-6 on Redhat 7.1. I want to know if i can block certain sites/urls from being accessed when proxy-suite functions as an outgoing proxy.Any Ideas/Hints!! thanx in advance aditya

2 1

Anfängerfrage
by Rüdiger Pretscher 07 Jan '02

07 Jan '02

Hallo Liebe Mitglieder, ich bin ein Absoluter Neuling auf dem Gebiet von Linux, habe bisher alles in Windows gemacht. Nun die Frage,wie kann ich denn Rechner der mit Linux läuft und auch mein Arbeitsrechner gleichzeitig für einen Windows Client als Proxy-Server laufen lassen. Danke Rüdiger Private Nachrichten bitte an rogerlinux(a)gmx.de

2 1