Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - effgee

Pages: [1]
1
How can I change the zentyal templates to keep apache from grabbing onto all the ip addresses?
I have other services that I want to use aliased ips on port 80 but apache keeps grabbing the ips, and Zentyal doesn't have the option anywhere to set which ip apache is on..

2
Installation and Upgrades / l7-filter segfault
« on: December 13, 2010, 03:29:08 pm »
Dec 13 16:30:21 pbx kernel: [68589.729686] l7-filter[18117]: segfault at 100000008 ip 00007ff0897e473a sp 00007ff089565aa0 error 4 in libc-2.11.1.so[7ff08976d000+17a000]


Weeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee...

3
Installation and Upgrades / URGENT: Newest Update hoses firewall..
« on: December 08, 2010, 02:42:08 pm »
With the last update, my firewall started blocking the internal interface as the external!!


I had eth0 as internal, and eth1 as ppoe external.
I noticed ever time I made a change my dashboard would stop responding.

I finally had to switch the interfaces to get everything working again and I don't know if its fixed completely.

Anyone know whats going on?!!

4
I'm having an issue with my Zentyal server.
Approximately 8-12 hours after enabling the swap file, my system continually reads + writes from the hard disk and becomes almost completely unresponsive. Kswapd0 is usually the culprit when looking at top.

If I leave my swap file disabled, the machine performs great for 2+ weeks without rebooting.
The moment I enable it, things start breaking.

Can someone help me figure out how to debug this?


5
As the title says..
What would cause this?
Zentyal 2.03

6
-I have an existing local dns in Zenyal, office.mycompany.com
-I created a virtual host, backup.office.mycompany.com


This happens....

Virtual host backup.office.mycompany.com added. A domain mycompany.com has been created with the mapping name backup.office - IP address 192.168.2.200.

This is WRONG.
Please add to Trac...............



7
I have my box configured properly to allow access to the server with PPTP.
But I am only able to ping from my internal network to the VPN clients.
When I ping from my vpn clients, the firewall drops the connection.. Here is the log..

192.168.2.200 is my Zentyal box running PPTPD
192.168.2.76 is my VPN client.

Pings from 192.168.2.200 to 192.168.2.76 work fine.
The opposite creates this..


Code: [Select]
[106770.600121] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=641 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=1051 MARK=0x1
Sep 27 19:53:08 pbx kernel: [106770.910101] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=70 TOS=0x00 PREC=0x00 TTL=128 ID=642 PROTO=UDP SPT=61716 DPT=53 LEN=50 MARK=0x1
Sep 27 19:53:09 pbx kernel: [106771.760103] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=645 DF PROTO=TCP SPT=58006 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x1
Sep 27 19:53:13 pbx kernel: [106775.591337] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=646 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=1052 MARK=0x1
Sep 27 19:53:15 pbx kernel: [106777.570104] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=649 DF PROTO=TCP SPT=58006 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x1
Sep 27 19:53:18 pbx kernel: [106780.601344] ebox-firewall drop IN=ppp1 OUT= MAC= SRC=192.168.2.76 DST=192.168.2.200 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=652 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=1053 MARK=0x1


It appears that zentyal is considering my vpn clients (which are on the same as the internal subnet (192.168.2.0/24)) are on an external network or something. I'm not sure.

8
Here's my scenario..

I have ssh running on my Zentyal on port 22.
I like having ssh on port 22 for access internally, but externally I want to add a bit of security through obscurity.

In External networks to Zentyal
I have port 2202 forwarded to 22
I try and connect to port 2202, the connection is dropped.

I open port 22 in External networks to Zentyal,
Once again I connect to ssh on port 2202, it connects correctly!

But this also means someone could connect directly to ssh on 22.

Why doesn't this work unless I have also opened port 22 on my external?

I think that the connection chain incorrectly routes the port forward back into External networks to Zentyal chain once it has been forwarded.. Please advise.. :)

9
Where are the definitions for the Packet Filter?
They are missing many things there, such as single ports, port ranges, VPN (PPTP), GRE, and other tricky things.

For example, I change my SSH port to 2202, I need to allow external access to Zenytal from port 2202. In the gui, there isn't an option for a single port.

Same for GRE.

????

10
Anyone else getting this error?
can't create /var/run/dhcpd.pid
in /var/log/syslog?

I solved it by following post #6 in this thread..
http://ubuntuforums.org/showthread.php?t=1092664

I dunno if its a ebox or ubuntu problem writing the pid to /var/run/dhcpd.pid instead of /var/run/dhcp3-server/dhcpd.pid

Just a heads up.

11
Installation and Upgrades / [Solved] - Zentyal 2.X Bind Issues
« on: September 21, 2010, 06:56:37 pm »
Zentyal does not properly clean up entries in /etc/bind when doing anything regarding dns or dhcp. Or even when uninstalling the package.

I just spend hours trying to figure out why it wouldn't resolve my local dns addresses just to figure out that it wasn't properly destroying and recreating the db files in /etc/bind

PLEASE look into and fix this major issue.

Zentyal on Ubuntu Server

12
Installation and Upgrades / Static hosts on Dynamic DNS.. quick questions
« on: September 20, 2010, 08:39:41 pm »
As mentioned in the documentation, Dynamic dns is used for updating DHCP client names to the DNS namespace.

Why can't we add static hosts to these dynamic domains?

I would like to have my dhcp clients resolve to
clientname.office.mycompany.com
as well as add static entries for my servers such as :
server1.office.mycompany.com
dev.office.mycompany.com

In the current incarnation I would have to create seperate domains for my DHCP client and my static office servers.

Why can't I do this? Is it technical or safety reasons?

Pages: [1]