Help to test the next version [INACTIVE]

[Claudio]

The BrazilFW 2.27 is available to be tested, this is not the final release yet, but I hope it works. The main reason I released that before an official annoucement is to detect some bug.

So, any feed back would be to much appreciated. Even it was: I've tested and it's ok.


Claudio





New Features
* - Ebtables 2.0.8rc1
* - Bridge Utils 1.0.6
* - Wireless Tools 28
* - Virtual Lans (802.1Q)


Upgrades
* - Kernel 2.4.32
* - L7-Filter 2.1
* - L7-Filter Protocols 2006-01-22
* - DnsMasq 2.26
* - Iptables 1.3.4


Improvements
* - Added 802.1q Vlan support to the kernel
* - Added Advanced Route support to the kernel
* - Added CBQ support to QOS
* - Added Time supporte to iptables
* - Added Connlimit support to iptables
* - Added iprange support to iptables
* - Added Multiport support to iptables
* - Added dns priority commands to firewall.local
* - New command hangup_and_reboot
* - Removed softdog
* - Removed local.tgz
* - Removed libpthread
* - Removed add-ons from installer disk


Bugs fixes
* - Typo in mkissue.sh
* - Webadmin not starting due a dot (.) in rc.M
* - fixed /etc/rc.d/rc.dnsmasq - dnsmasq.conf.template
* - fixed Eth0 for iptraf at main menu
* - fixed gateway.test bug
* - fixed portfw.cgi not cleaning the variable INET_IP="$4"
* - wrong color ether_conf.cgi page
* - removed lu.timeserver, it was embedded into c.firewall
* - Not using local domain as a dnsmasq options anymore
* - wrong Dns information at index.cgi page
* - fixed profile changes with cron
* - fixed showing version number found on hd installer
* - fixed hd installer loosing the profiles


Webadmin
* - added real memory information to diagnostic tools
* - new logo and new openning page
* - show cron process state at main page
* - show and set cron state at cron.cgi page
* - added link the custom dns/dhcp configuration
* - added pci devices list to diagnostic tools
* - show and set interfaces used for lan, inet and dmz
* - missing translation for the DMZ page


Wizard
* - Parameters = maybe for some nics (eepro100)
* - Options for install aditional packages or not.

[Jenya]

Hello Claudio,

is this bug in the BFW v 2.26.0 - QOS subsystem also repaired?

- in the rc.qos.coyote file

"$TC class add dev $IF_LOCAL parent ${2} classid 1:$slow_cls_id htb prio 1 rate ${DOWN_SLOW_PRI}kbit ceil ${3}kbit burst ${QOS_SDOWN_BURST}k
" is wrong

The above line should look like this one:

"$TC class add dev $IF_LOCAL parent ${1} classid 1:$slow_cls_id htb prio 1 rate ${DOWN_SLOW_PRI}kbit ceil ${3}kbit burst ${QOS_SDOWN_BURST}k"


viewtopic.php?t=54606&highlight=bug

Thanks a lot

[Claudio]

Not in this file, sorry. I've missed that one. Thank you for point that.

I've fixed it in my development environment right now, so it will be ok for the next beta (in a couple days).

The guys from phpbb forum system are working on a integrated Bug Tracking System which i intend to add to this site, then I hope this kind of lapse would not happen anymore.

[Claudio]

Beta 2 released, this bug fix included.
Beta 3 released, added the NICs list to the wizard.

http://www.brazilfw.com.br/beta/brazilf ... indows.zip

[aenertia]

Hi everyone,

Well as a long time Unix admin, I am somewhat displeased at the lack of linux support for the installer script.

To use brazil it seems you MUST have windows, even the linux installer package is a pain in the ass to use and is out of date.

Mainly the option needed to be added to the installer scripts are for hd based installs.

Also the windows installer runs fine under wine and so you can add the following option in there to make it usefull for linux users.

Basically, instead of having the images write automatically to a:/fd0 (it looks like all you are doing is compiling a dos disc image and dd'ing it to the raw device but it's difficult to get at these images). You give a screen at the end to allow the images to be saved to files. Not hard... and would make your installer useful.

Second thing, relates back to the HD image install.

It should be relatively easy once you have this image saving option sorted (should be 10 mins of coding at max) to write a single image file (for hdd/cf) installs that is not size constrained.

The reason for this is basically utility. I should not have to go and find a fdd drive to put into the machine that is already network accessible and has dd installed.

Basically with this hdd large install image in tow, I scp it to a running machine, and then dd it to /dev/hd0 (or bsd equivilent in my case).

This is useful for people doing upgrades from existing installs, people with netbootable machines perspective.

I appreciate the target audience is for windows users, but having said that this simple little thing would make it all the more appealing to more advanced users.

One other thing of note, it would be nice to be able to select external packages for inclusion in the initial install image. This "should" be pretty basic in that you have a file selector dialogue and then browse to the packages you want to include. This just save a bit of time, and allows for customised install images.


Hope that didn't sound to abrasive, I am just a bit anoyed that after 2 hours of fiddling with various installers and packages I still have not got a good way of getting an hdd image bootable on the machine it needs to run on. (No I DONT have access to a windows machine).

[filo]

Hi Claudio,
in 'bug fixes' section you wrote "fixed profile changes with cron".
So, changing profile thru cron not working properly in version 2.26 ?
It's strange, I have tried that and it seems to be working fine.
Could you explain this point, please ? Thanks.

[Claudio]

Well as a long time Unix admin, I am somewhat displeased at the lack of linux support for the installer script.

It´s Here:

http://www.brazilfw.com.br/beta/brazilf ... nux.tar.gz

Mainly the option needed to be added to the installer scripts are for hd based installs.

Excuse me, I did not understand that.

Also the windows installer runs fine under wine and so you can add the following option in there to make it usefull for linux users.

Basically, instead of having the images write automatically to a:/fd0 (it looks like all you are doing is compiling a dos disc image and dd'ing it to the raw device but it's difficult to get at these images). You give a screen at the end to allow the images to be saved to files. Not hard... and would make your installer useful.

That's a good Ideia, I'm not sure what I need to compose that image, but I will try.

It should be relatively easy once you have this image saving option sorted (should be 10 mins of coding at max) to write a single image file (for hdd/cf) installs that is not size constrained.

The reason for this is basically utility. I should not have to go and find a fdd drive to put into the machine that is already network accessible and has dd installed.

Basically with this hdd large install image in tow, I scp it to a running machine, and then dd it to /dev/hd0 (or bsd equivilent in my case).

This is useful for people doing upgrades from existing installs, people with netbootable machines perspective.

The main reason I wrote the installer is for people who don't know how to partition and format the hd.

There are some people asking for an instalation without floppy. I agree with them but I'm not sure how to do this. Please open a topic on development forum and let's discuss that.

One other thing of note, it would be nice to be able to select external packages for inclusion in the initial install image. This "should" be pretty basic in that you have a file selector dialogue and then browse to the packages you want to include. This just save a bit of time, and allows for customised install images.

I have a problem here, the floppy space.
I guess that a web site based repository and a friendly way to download the packages straight to the system would be more usefull.

Hope that didn't sound to abrasive, I am just a bit anoyed that after 2 hours of fiddling with various installers and packages I still have not got a good way of getting an hdd image bootable on the machine it needs to run on. (No I DONT have access to a windows machine).

Don't worry
As I said, I'd like to discuss your ideias and apply most of them.

[Claudio]

Hi Claudio,
in 'bug fixes' section you wrote "fixed profile changes with cron".
So, changing profile thru cron not working properly in version 2.26 ?
It's strange, I have tried that and it seems to be working fine.
Could you explain this point, please ? Thanks.

Some guys have reported I'm not reloading cron after a profile.reload.

Acctually, they put load to profile 2 in cron inside the profile 1 and load to profile 1 in cron inside the profile 2.

If you put both loads inside both crons (which i recommend) you should not notice any problem.

[filo]

Acctually, they put load to profile 2 in cron inside the profile 1 and load to profile 1 in cron inside the profile 2.

I have written both scripts exactly as you noticed - that's the reason, why I'm without problems.
Thanks.

[Esteban]

Claudio,

After the boot disk was created I pressed <Next> and jumped to the HD installation (Step 10). Since I wanted to skip that I pressed <Next> again but to my surprise the wizard showed the same screen that on step 10. Did you intend to remove the last screen?

[Claudio]

No, it's a bug.
Fixing...

[Esteban]

The following are not bugs actually. They could be said to be language issues.
My suggestions are marked in green and sometimes written between square brackets.

In mkissue.sh

“Wellcome” should be spelt with one “l”

In Windows Floppy Creator – Step 8

These are some optional packages. You should not install all of them because they might not fit in your floppy. DO NOT INSTALL WHAT YOU DO NOT NEED.

L7 Filter – 15 Kb

L7 Filter is a nice [or “an effective”. I think “nice” is too neutral in this case] way to block Peer-to-Peer programs like Kazaa, eMule and BitTorrent. It has an extense list of protocols that you can use to match your traffic.

Wireless Tools – 41 Kb [There should be more elaboration on the first sentence. Perhaps another sentence would help. I mean, they are tools for installing the wireless NIC, but what do they do? Explaining this would take too much?]

These are the utilities that you need to add a Wi-Fi NIC to your BrazilFW. They are not the NIC drivers which need to be added [or “installed” so as not to repeat “add”] according to your chipset card.

Advanced Router Options – 34 Kb

This adds some extra fetures like 802.1Q Vlan, CBQ based QoS and some additional matches to Iptables. It is usually used by professionals.

Bridged Firewalling - 44 Kb

This is [without “the”] Ebtables. It allows you to add a bridge to your system. It is usually used by professionals.

[So, this last option adds a bridge to my system. But, what about the bridge add-on that was already available? Is it the same that ebtables?


Hope you find useful this info.

Esteban

[Claudio]

Gracias,

I really, really need this kind of help.

[Jenya]

Hi all,
I can see * - Added Connlimit support to iptables. I really need this feature but does anybody know how to use it in practise?
Many thanks for advices

[Hamski]

viewtopic.php?t=54454 :(

[handyaswan]

can i put this beta 2.27 to my current bfw 2.26?
how?
only module?

[jaredharet]

I install http://www.brazilfw.com.br/beta/brazilf ... indows.zip, but I don`t ping to BrazilFW

[linx]

Hello Claudio!

I try to install BFW 2.27 on Card Flash IDE drive, but system on boot can`t mount boot device and load any .tgz packages

When i mount /dev/hda1 from console:

Código: Selecionar todos

# mount /dev/hda1 /mnt
mount: Mounting /dev/hda1 on /mnt failed: No such device or address


[nachazo]

Hello Claudio I download brazil 2.27 beta, i create the flopy with ebtables module....

The brazilfw dosen´t work properly...:(

I can´t get acces over LAN or WAN.... the unique way to do something is with the keyboard....

ebtables don´t work but brctl works fine....

but i don´t have conectivity with the nics cards... (i do pings and i get nothing)....

I supouse that you know what i saying to you...

Have you an explanation?

thanks!

[jaredharet]

I was set Bridged Firewalling and not ping BrazilFW

I not set Bridged Firewalling and work

[Claudio]

This comes because the bridge comes enabled by default. Now I can see this was not a good idea.

I will change this behavior, so you can add the package, boot, configure it properly and then turn it on.

[jaredharet]

http://www.brazilfw.com.br/beta/brazilf ... indows.zip = dload.php?action=file&file_id=55

And if you not

What is new

[nachazo]

he llo claudio im testing brazilfw 2.27 with ebtables....

Now when i boot the machine i can get acces over nics...

but command ebtables don´t work

i connect with putty and i use command ebtables... then appears: "ebtables: can't load library 'libebtc.so' "

what i´m doing wrong?

regards and thanks for adding ebtables!!!!

[Claudio]

I will check it.

[Claudio]

You're right, I forgot this file.

It will be ok to the next release. Until that, please download and use this fixed package:

http://www.brazilfw.com.br/downloads/patch/bridge.tgz

By the way, I've added all ebtables modules, but I don't know if we need all of them.
There's any ebtables expert who could tell me which modules are useful and which modules are not.

[nachazo]

current release have it? (2.27.1) ?

thanks.

[Claudio]

current release have it? (2.27.1) ?

No, but is easy to fix.

The wizard has a folder called extras, just download the fixed package and repace the file. The next floppy you create will be all right.

[nachazo]

I try your modification....

i got the same error...

I test it in 2 diferent PC. But the situation is the same.

ebtables: can't load library 'libebtc.so'

[nachazo]

Hello Claudio....

I test brazilfw 2.27.2 and enables bridge with succes....

command ebtables work too!

Now i´m triying to rate shape with cbq.... but i get errors....

i use this guide: http://ebtables.sourceforge.net/examples/example5.html

i enter the first command:

TC qdisc add dev eth0 root handle 1:0 cbq bandwidth 10Mbitn avpkt 1000 mpu 64

"Unknown qdisc "cbq", hence option "bandwidth" is unparsable"

i have the advance route package...

regards.

[Claudio]

CBQ have some missing files too.
I will add them in a few days.

[nachazo]

i have a new error message for you claudio...

i try to do anti spoof mac or ip rule

i put this :

ebtables -A FORWARD -p IPv4 --ip-src 192.168.1.48 -s ! 00:11:D8:76:F3:24 -j DROP

i got this:

"Problem with the specified Ethernet protocol 'IPv4', perhaps /etc/ethertypes is missing."

regards.

[Claudio]

This one is realy new.
I will try to get some help on ebtables mailing list.

[nachazo]

This one is realy new.
I will try to get some help on ebtables mailing list.

Can you fix the problem?

regards.

[Claudio]

Its fixed already, I really missed the file ethertypes.

Patch:
http://www.brazilfw.com.br/downloads/patch/bridge.tgz