Projekat

Općenito

Profil

Akcije

Podrška #11699

Zatvoren

novi router-sa <-> sc_linksys1

Dodano od Ernad Husremović prije više od 18 godina. Izmjenjeno prije oko 17 godina.

Status:
Zatvoreno
Prioritet:
Normalan
Odgovorna osoba:
Kategorija:
-
Početak:
Završetak:
% završeno:

0%

Procjena vremena:

Opis

novi router-sa <-> sc_linksys1

ref. trac ticket: http://trac.sigma-com.net/sa-ScInfrastructure/ticket/611


Povezani tiketi 1 (0 otvoreno1 zatvoren)

korelira sa router - Podrška #13905: openwrt za router-sa kamikazeZatvorenoErnad Husremović08.04.2008

Akcije
Akcije #1

Izmjenjeno od Ernad Husremović prije više od 18 godina

ranije aktivnosti sa ovim uređajem: #11364

Akcije #2

Izmjenjeno od Ernad Husremović prije više od 18 godina

trenutno stanje nvram-a

Akcije #3

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# nvram set lan_domain=sigma-com.net
root@sc_linksys_1:~# nvram commit
Akcije #4

Izmjenjeno od Ernad Husremović prije više od 18 godina

Ethernet/Wireless Physical Connections

IP address       HW type     Flags       HW address            Mask     Device
192.168.45.149   0x1         0x2         00:0D:56:74:E4:9A     *        br0
Akcije #5

Izmjenjeno od Ernad Husremović prije više od 18 godina

trenutno stanje je:

lan_ifnames=vlan0 eth1 wds0.49153 wds0.49154

inače linksys wrt54g ima ovu harversku strukturu

LAN = vlan0
WAN = vlan1
wifi = eth1

evo slike:
http://voidmain.is-a-geek.net/i/WRT54_sw2_internal_architecture.png

Akcije #6

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:/etc/init.d# nvram set wan_proto=pppoe
root@sc_linksys_1:/etc/init.d# nvram set pppoe_username=hsamra
root@sc_linksys_1:/etc/init.d# nvram set pppoe_passwd=xxxx
root@sc_linksys_1:/etc/init.d# nvram set pppoe_username=hsamrae
root@sc_linksys_1:/etc/init.d# nvram commit
Akcije #7

Izmjenjeno od Ernad Husremović prije više od 18 godina

našao sam bilješke kada sam štimao pppoe kod sc_wl_hdd_1 router-a

Akcije #8

Izmjenjeno od Ernad Husremović prije više od 18 godina

na /mnt/data/download/openwrt.ipk

našao sam i ove ifup.* skripte

stavio sam ih u repos

http://repos.sigma-com.net/hernad/sa/openwrt/sbin_ifup.pppoe

http://repos.sigma-com.net/hernad/sa/openwrt/sbin_ifup.pptp

Akcije #9

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:/sbin# scp 192.168.45.149:/mnt/data/download/openwrt.ipk/kmod*pppoe* .

Host '192.168.45.149' is not in the trusted hosts file.
(fingerprint md5 52:b0:83:4d:da:50:44:ea:65:f8:72:40:f8:de:22:90)
Do you want to continue connecting? (y/n) y
Password:
kmod-pppoe_2.4.30-brcm-3_mipsel.ipk           100% 9103     8.9KB/s   00:00
root@sc_linksys_1:/sbin# ipkg install kmod*pppoe*ipk
Installing kmod-pppoe (2.4.30-brcm-3) to root...
Configuring kmod-pppoe
Successfully terminated.
root@sc_linksys_1:/sbin#
Akcije #10

Izmjenjeno od Ernad Husremović prije više od 18 godina

hm prijavljume mi da nema prostora ... ovo je firmware ali bez pppoe-a

idem flashirati novi firmware

root@sc_linksys_1:~# scp 192.168.45.149:/mnt/data/download/openwrt.ipk/rc6/pppoe/openwrt-brcm-2.4-squashfs.trx
 .
root@sc_linksys_1:~# mtd -r write openwrt-brcm-2.4-squashfs.trx linux

Akcije #11

Izmjenjeno od Ernad Husremović prije više od 18 godina

hernad@desk-hernad:~$ telnet 192.168.45.1

radi

Akcije #12

Izmjenjeno od Ernad Husremović prije više od 18 godina

setovao password root@sc_linksys_1:/# passwd

sada pristupam sa ssh

Akcije #13

Izmjenjeno od Ernad Husremović prije više od 18 godina

Akcije #14

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                 1.0M      1.0M         0 100% /rom
none                      7.0M     24.0k      7.0M   0% /tmp
/tmp/root                 1.0M      1.0M         0 100% /tmp/root
/dev/mtdblock/4           2.2M    324.0k      1.9M  14% /jffs
/jffs                     1.0M      1.0M         0 100% /
Akcije #15

Izmjenjeno od Ernad Husremović prije više od 18 godina

nakon instalacije ovog fimware-a

ifup wan radi i postoji /sbin/ifup.pppoe

Akcije #16

Izmjenjeno od Ernad Husremović prije više od 18 godina

dyndns client

root@sc_linksys_1:~# ipkg install ez-ipupdate*ipk
Installing ez-ipupdate (3.0.11b8-2) to root...
Configuring ez-ipupdate
Successfully terminated.

Akcije #17

Izmjenjeno od Ernad Husremović prije više od 18 godina

/etc/ez-ipupdate.conf

service-type=dyndns
user=hsmra:hernad
host=members.dyndns.org
interface=ppp0
cache-file=/tmp/ez-ipupdate.cache
pid-file=/var/run/ez-ipupdate.pid

root@sc_linksys_1:~# ez-ipupdate -c /etc/ez-ipupdate.conf

ez-ipupdate Version 3.0.11b8
Copyright (C) 1998-2001 Angus Mackay
ioctl(SIOCGIFADDR): No such device
could not resolve ip address for ppp0

izgleda mi ok, naravno problem je što ppp0 nije aktivan

Akcije #18

Izmjenjeno od Ernad Husremović prije više od 18 godina

podesio dns server

root@sc_linksys_1:/etc/init.d# nvram set lan_dns=192.168.45.250 195.222.32.10 195.222.32.20
root@sc_linksys_1:/etc/init.d# nvram commit

Akcije #19

Izmjenjeno od Ernad Husremović prije više od 18 godina

gateway je on sam

root@sc_linksys_1:/etc/init.d# nvram set lan_gateway=
root@sc_linksys_1:/etc/init.d# nvram commit

Akcije #20

Izmjenjeno od Ernad Husremović prije više od 18 godina

otvorio sam repos config sc_linksys_1-a

inicialnu vrijednost firewall-a ću zamijeniti sa fwbuilder verzijom

Akcije #21

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:/etc/init.d# which iptables
/usr/sbin/iptables
Akcije #22

Izmjenjeno od Ernad Husremović prije više od 18 godina

na kraju ovog posla trebam napraviti backup po ovom receptu

dd if=/dev/mtdblock/1 of=/tmp/firmware.trx

Akcije #23

Izmjenjeno od Ernad Husremović prije više od 18 godina

sada sam podesio da je firewall fwbuilder-ov

root@sc_linksys_1:/etc/init.d# rm S35firewall
root@sc_linksys_1:/etc/init.d# ln -s /etc/sc_linksys_1.fw S35firewall
root@sc_linksys_1:/etc/init.d# ls -l S35firewall
lrwxrwxrwx    1 root     root           20 Jan  1 00:43 S35firewall -> /etc/sc_linksys_1.fw
root@sc_linksys_1:/etc/init.d# chmod +x S35firewall
root@sc_linksys_1:/etc/init.d# ls -l S35firewall
lrwxrwxrwx    1 root     root           20 Jan  1 00:43 S35firewall -> /etc/sc_linksys_1.fw
root@sc_linksys_1:/etc/init.d#

međutim fale mi još neki paket, prije svega ip i iptables-contrack

ip:

root@sc_linksys_1:~# ipkg install ip_*ipk
Installing ip (2.6.11-050330-1) to root...
Configuring ip
Successfully terminated.

root@sc_linksys_1:~# ipkg install *conntrack*ipk
Installing iptables-mod-conntrack (1.3.3-2) to root...
Installing kmod-ipt-conntrack (2.4.30-brcm-4) to root...
Package kmod-ipt-conntrack (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-mod-conntrack
Configuring kmod-ipt-conntrack
Successfully terminated.
Akcije #24

Izmjenjeno od Ernad Husremović prije više od 18 godina

hm nešto mu još fali

iptables v1.3.3: Unknown arg @--log-level'
Try @iptables -h' or 'iptables --help' for more information.
Rule 2 (global)

Akcije #25

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# ipkg  install *ip*extra*ipk
Installing iptables-extra (1.3.3-2) to root...
Installing kmod-ipt-extra (2.4.30-brcm-4) to root...
Configuring kmod-ipt-extra
Successfully terminated.
Collected errors:
ERROR: Cannot satisfy the following dependencies for iptables-extra:
         kmod-iptables-extra iptables-mod-extra iptables-mod-filter iptables-mod-ipopt iptables-mod-ipsec iptables-mod-nat iptables-mod-ulog
Akcije #26

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# ipkg  install *ip*filter*ipk Installing iptables-mod-filter (1.3.3-2) to root...
Installing kmod-ipt-filter (2.4.30-brcm-4) to root...
Package kmod-ipt-filter (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-mod-filter
Configuring kmod-ipt-filter
Successfully terminated.
Akcije #27

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# ipkg  install *ip*ulog*ipk Installing iptables-mod-ulog (1.3.3-2) to root...
Installing kmod-ipt-ulog (2.4.30-brcm-4) to root...
Package kmod-ipt-ulog (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-mod-ulog
Configuring kmod-ipt-ulog
Successfully terminated.

međutim --log-level problem je ostao ?!?

Akcije #28

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# ipkg  install *ip*nat*ipk Installing iptables-mod-nat (1.3.3-2) to root...
Installing kmod-ipt-nat (2.4.30-brcm-4) to root...
Installing kmod-ipt-nat-pptp (2.4.30-brcm-4) to root...
Package kmod-ipt-nat (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-mod-nat
Configuring kmod-ipt-nat
Configuring kmod-ipt-nat-pptp
Successfully terminated.
Akcije #29

Izmjenjeno od Ernad Husremović prije više od 18 godina

našao sam dobro uputstvo za fwbuilder+openwrt http://www.martin.cc/OpenWrt/OpenWrt%20Config_RC5.pdf

Akcije #30

Izmjenjeno od Ernad Husremović prije više od 18 godina

prema njemu trebam iptable-utils

root@sc_linksys_1:~# ipkg install iptables*utils*ipk
Installing iptables-utils (1.3.3-2) to root...
Configuring iptables-utils
Successfully terminated.

Akcije #31

Izmjenjeno od Ernad Husremović prije više od 18 godina

dodao i ovaj pkill

root@sc_linksys_1:/usr/bin# cat /usr/bin/pkill

#!/bin/sh

exec killall $*
# NOTE.. The following commented lines have been left just in case
# the opernWrt guys take killall out of busybox
#
# case $# in
# 1)
# SIG="-15" 
# STRING="$1" 
# ;;
# 2)
# SIG="$1" 
# STRING="$2" 
#. ;;
# *)
# echo "usage: $0 [-signal] string" 
# exit 1
# ;;
# esac
#
# ps | grep $STRING | grep -v grep | grep -v $0 | while read pid restOfLine
# do
# kill $SIG $pid 2>/dev/null
# done

Akcije #32

Izmjenjeno od Ernad Husremović prije više od 18 godina

čitraj ernade čitaj .. u bilješkama za sc_wl_hdd_1 našao

http://forum.openwrt.org/viewtopic.php?id=4008

    ALuedtke wrote:

    Sorry for asking this probably simple question, but how do I enable firewall logging?

Install the modules required for logging:
ipkg install iptables-mod-extra

At the top of your firewall script, add:
insmod ipt_LOG

and then to log traffic, just add these in the appropriate location in the firewall script:
iptables -A INPUT -i tun0 -J LOG --log-prefix "IN tun0: " 

(adjust the rule name, interface, etc, as approriate)

Cheers,
Martin.

ipt_LOG

Akcije #33

Izmjenjeno od Ernad Husremović prije više od 18 godina

ustvari ovdje

http://forum.openwrt.org/viewtopic.php?id=4008

root@sc_linksys_1:~# ipkg install *ipopt* *ipsec*
Installing iptables-mod-ipopt (1.3.3-2) to root...
Installing kmod-ipt-ipopt (2.4.30-brcm-4) to root...
Package kmod-ipt-ipopt (2.4.30-brcm-4) installed in root is up to date.
Installing iptables-mod-ipsec (1.3.3-2) to root...
Installing kmod-ipt-ipsec (2.4.30-brcm-4) to root...
Package kmod-ipt-ipsec (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-mod-ipopt
Configuring iptables-mod-ipsec
Configuring kmod-ipt-ipopt
Configuring kmod-ipt-ipsec
Successfully terminated.
root@sc_linksys_1:~#
Akcije #34

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:~# ipkg install *extra* *queue* Installing iptables-extra (1.3.3-2) to root...
Installing kmod-iptables-extra (2.4.30-brcm-4) to root...
Installing kmod-ipt-extra (2.4.30-brcm-4) to root...
Installing kmod-ipt-nat-extra (2.4.30-brcm-4) to root...
Installing kmod-ipt-queue (2.4.30-brcm-4) to root...
Installing iptables-mod-extra (1.3.3-2) to root...
Package iptables-mod-extra (1.3.3-2) installed in root is up to date.
Package kmod-ipt-extra (2.4.30-brcm-4) installed in root is up to date.
Package kmod-ipt-nat-extra (2.4.30-brcm-4) installed in root is up to date.
Package kmod-iptables-extra (2.4.30-brcm-4) installed in root is up to date.
Package kmod-ipt-queue (2.4.30-brcm-4) installed in root is up to date.
Configuring iptables-extra
Configuring iptables-mod-extra
Configuring kmod-ipt-extra
Configuring kmod-ipt-nat-extra
Configuring kmod-ipt-queue
Configuring kmod-iptables-extra
Successfully terminated.
root@sc_linksys_1:~#

Akcije #35

Izmjenjeno od Ernad Husremović prije više od 18 godina

i sada je napokon OK nema errora

Akcije #36

Izmjenjeno od Ernad Husremović prije više od 18 godina

ovo bi takođe trebalo da radi kada aktiviramo ppp0

/usr/sbin/ez-ipupdate
/etc/ez-ipupdate.conf
/etc/hotplug.d/iface/10-ez-ipupdate

Successfully terminated.
root@sc_linksys_1:/etc/ppp# cat /etc/hotplug.d/iface/10-ez-ipupdate
. /etc/functions.sh
NAME=ez-ipupdate
CONFIG=/etc/$NAME.conf
COMMAND=/usr/sbin/$NAME
[ "$ACTION" = "ifup" -a "$INTERFACE" = "wan" ] && {
        [ -x $COMMAND ] && [ -r $CONFIG ] && {
                IFNAME=$(nvram get ${INTERFACE}_ifname)
                $COMMAND -c $CONFIG -i $IFNAME 2>&1 | logger -t $NAME
        } &
}

Akcije #37

Izmjenjeno od Ernad Husremović prije više od 18 godina

root@sc_linksys_1:/etc/ppp# nvram show | grep lan_ lan_gateway=
lan_domain=sigma-com.net
dr_lan_rx=1 2
lan_netmask=255.255.255.0
lan_lease=86400
lan_stp=0
dr_lan_tx=1 2
lan_hwaddr=00:13:10:43:88:BF
size: 9382 bytes (23386 left)
lan_ifnames=vlan0 eth1 wds0.49153 wds0.49154
lan_dns=192.168.45.250 195.222.32.10 195.222.32.20
lan_ipaddr=192.168.45.1
lan_proto=static
lan_ifname=br0
lan_wins=
lan_hwnames=

prikopčao sam adsl ali ne radi otišao u web interfejs i tamo podesio lozinku i usera

ipak je to ppp_username, ppp_passwd

root@sc_linksys_1:~# nvram show | grep ppp_
ppp_idletime=5
ppp_passwd=xxxxxxxxxxxxxx
ppp_get_ac=
ppp_username=hsamrae

Akcije #38

Izmjenjeno od Ernad Husremović prije više od 18 godina

nakon toga pppoe napokon radi

root@sc_linksys_1:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
89.146.128.1    *               255.255.255.255 UH    0      0        0 ppp0
192.168.45.0    *               255.255.255.0   U     0      0        0 br0
default         SE400.PPPoE-1.s 0.0.0.0         UG    0      0        0 ppp0

Akcije #39

Izmjenjeno od Ernad Husremović prije više od 18 godina

logread mi je rekao ovo

Jan  1 00:04:39 (none) user.notice ez-ipupdate: ez-ipupdate Version 3.0.11b8
Jan  1 00:04:39 (none) user.notice ez-ipupdate: Copyright (C) 1998-2001 Angus Mackay
Jan  1 00:04:39 (none) user.notice ez-ipupdate: connected to members.dyndns.org (63.208.196.95) on port 80
Jan  1 00:04:39 (none) user.notice ez-ipupdate: invalid hostname: members.dyndns.org
root@sc_linksys_1:~# logread

Akcije #40

Izmjenjeno od Ernad Husremović prije više od 18 godina

ispravio pa sve iz /etc/stavio u repos

root@sc_linksys_1:~# ez-ipupdate -c /etc/ez-ipupdate.conf -foreground
ez-ipupdate Version 3.0.11b8
Copyright (C) 1998-2001 Angus Mackay
connected to members.dyndns.org (63.208.196.95) on port 80
a feature requested is only available to donators, please donate
Akcije #41

Izmjenjeno od Ernad Husremović prije više od 18 godina

podesio dns server da prvi proradi


root@printserver:~# /etc/init.d/networking restart
* Reconfiguring network interfaces... SIOCDELRT: No such process
                                                                         [ ok ]
root@printserver:~# ping www.google.ba
PING www.l.google.com (209.85.135.99) 56(84) bytes of data.
64 bytes from mu-in-f99.google.com (209.85.135.99): icmp_seq=1 ttl=240 time=62.0 ms

Akcije #42

Izmjenjeno od Ernad Husremović prije više od 18 godina

sljedeći je bio boing-1, tu sam morao ručno sa "ip del ..." brisati staru rutu:

root@boing-1:~# /etc/init.d/networking restart
* Reconfiguring network interfaces... SIOCDELRT: No such process
                                                                         [ ok ]
root@boing-1:~# ping www.google.ba
PING www.l.google.com (209.85.135.99) 56(84) bytes of data.
From 192.168.45.4 icmp_seq=1 Destination Net Unreachable

--- www.l.google.com ping statistics ---
1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms

root@boing-1:~# vi /etc/network/interfaces
root@boing-1:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.169.45.4    192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
192.169.45.100  192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
192.169.45.0    0.0.0.0         255.255.255.0   U     0      0        0 eth1
172.16.145.0    0.0.0.0         255.255.255.0   U     0      0        0 vmnet1
192.168.180.0   0.0.0.0         255.255.255.0   U     0      0        0 vmnet8
192.168.45.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.168.45.1    0.0.0.0         UG    0      0        0 eth0
0.0.0.0         192.168.45.4    0.0.0.0         UG    0      0        0 eth0
root@boing-1:~# ip show
Object "show" is unknown, try "ip help".
root@boing-1:~# ip route show
192.169.45.4 via 192.168.45.4 dev eth0
192.169.45.100 via 192.168.45.4 dev eth0
192.169.45.0/24 dev eth1  proto kernel  scope link  src 192.169.45.230
172.16.145.0/24 dev vmnet1  proto kernel  scope link  src 172.16.145.1
192.168.180.0/24 dev vmnet8  proto kernel  scope link  src 192.168.180.1
192.168.45.0/24 dev eth0  proto kernel  scope link  src 192.168.45.230
default via 192.168.45.1 dev eth0
default via 192.168.45.4 dev eth0

root@boing-1:~# ip route del default via 192.168.45.4 dev eth0
root@boing-1:~# ip route show
192.169.45.4 via 192.168.45.4 dev eth0
192.169.45.100 via 192.168.45.4 dev eth0
192.169.45.0/24 dev eth1  proto kernel  scope link  src 192.169.45.230
172.16.145.0/24 dev vmnet1  proto kernel  scope link  src 172.16.145.1
192.168.180.0/24 dev vmnet8  proto kernel  scope link  src 192.168.180.1
192.168.45.0/24 dev eth0  proto kernel  scope link  src 192.168.45.230
default via 192.168.45.1 dev eth0
root@boing-1:~# ping www.google.ba
PING www.l.google.com (209.85.135.147) 56(84) bytes of data.
64 bytes from 209.85.135.147: icmp_seq=1 ttl=240 time=74.8 ms
64 bytes from 209.85.135.147: icmp_seq=2 ttl=240 time=61.4 ms

--- www.l.google.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1011ms
rtt min/avg/max/mdev = 61.415/68.109/74.804/6.699 ms

Akcije #43

Izmjenjeno od Ernad Husremović prije više od 18 godina

otišao sam da pogledam rute na vserver sesijama

root@dev-infra-2:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.169.45.4    192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
192.169.45.100  192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
192.169.45.0    0.0.0.0         255.255.255.0   U     0      0        0 *
172.16.145.0    0.0.0.0         255.255.255.0   U     0      0        0 *
192.168.180.0   0.0.0.0         255.255.255.0   U     0      0        0 *
192.168.45.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.168.45.1    0.0.0.0         UG    0      0        0 eth0
root@dev-infra-2:~# reboot
Akcije #44

Izmjenjeno od Ernad Husremović prije više od 18 godina

hm pobošano mi izgleda -

restartovao dev-infra-2

Akcije #45

Izmjenjeno od Ernad Husremović prije više od 18 godina

vmware sesiju suse-90 (if server) podesio sa YaST2

Akcije #46

Izmjenjeno od Ernad Husremović prije više od 18 godina

na dyndns account-u samra podesio timezone https://www.dyndns.com/account/settings/prefs.html

Europe/Sarajevo

Akcije #47

Izmjenjeno od Ernad Husremović prije više od 18 godina

podesio routers opciju na dhcp serveru

root@printserver:~# /etc/init.d/dhcp3-server restart
Internet Systems Consortium DHCP Server V3.0.3
Copyright 2004-2005 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/
* Stopping DHCP server                                                  [ ok ]
Internet Systems Consortium DHCP Server V3.0.3
Copyright 2004-2005 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/
* Starting DHCP server:                                                 [ ok ]
root@printserver:~#

Akcije #48

Izmjenjeno od Ernad Husremović prije više od 18 godina

morao sam i na printserveru izbrisati staru rutu

192.168.45.0/24 dev eth0  proto kernel  scope link  src 192.168.45.250
default via 192.168.45.1 dev eth0
default via 192.168.45.4 dev eth0
root@printserver:~# ip route del default via 192.168.45.4 dev eth0

Akcije #49

Izmjenjeno od Ernad Husremović prije više od 18 godina

postavio sam ntpclient i setovao vrijeme

root@sc_linksys_1:~# ntpclient  -h ntp.ubuntu.com -s
39077 75549.551   68627.0     13.0   33529.0  65918.0         0

root@sc_linksys_1:~# date
Thu Dec 28 20:59:14 UTC 2006
Akcije #50

Izmjenjeno od Ernad Husremović prije više od 18 godina

na osnovu #11593 podesio i timezone

root@sc_linksys_1:~# echo "CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00" > /etc/TZ
root@sc_linksys_1:~# date
Thu Dec 28 22:00:26 CET 2006

Akcije #51

Izmjenjeno od Ernad Husremović prije više od 18 godina

kod /etc/ez-ipupdate.conf

izbrisao sam liniju

cache=/tmp/*cache

testirao sam reboot rooter-a

ppp0      Link encap:Point-Point Protocol
          inet addr:89.146.142.68  P-t-P:89.146.128.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
          RX packets:38 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:4808 (4.6 KiB)  TX bytes:1960 (1.9 KiB)

i pogledao na web strani dyndns-a sve je ok refresh dns-a se vrši

Akcije #52

Izmjenjeno od Ernad Husremović prije više od 18 godina

odradio restart java-infra-2 servera

Akcije #53

Izmjenjeno od Ernad Husremović prije više od 18 godina

joj restartovao sam boing-1 bez potrebe

naime zbunila me je ruta 192.*169*.45.4

root@mail-gw-10:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.169.45.4    192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
192.169.45.100  192.168.45.4    255.255.255.255 UGH   0      0        0 eth0
172.16.145.0    *               255.255.255.0   U     0      0        0 *
192.169.45.0    *               255.255.255.0   U     0      0        0 *
192.168.180.0   *               255.255.255.0   U     0      0        0 *
192.168.45.0    *               255.255.255.0   U     0      0        0 eth0
default         192.168.45.1    0.0.0.0         UG    0      0        0 eth0

Akcije #54

Izmjenjeno od Ernad Husremović prije više od 18 godina

ručno sam pokrenuo zimbra-1 servise (zmmtactl, zmamavaisdctl, zmclamdctl) i provjerio

zimbra@zimbra-1:/root$ zmcontrol status
Host zimbra-1.sigma-com.net
        antispam                Running
        antivirus               Running
        ldap                    Running
        logger                  Running
        mailbox                 Running
        mta                     Running
        snmp                    Running
        spell                   Running
zimbra@zimbra-1:/root$

Akcije #55

Izmjenjeno od Ernad Husremović prije više od 18 godina

nakon restarta nije se podiglao wildfire server pa sam ga ručno pokrenouo

root@java-infra-2:~# /etc/rc.local
root@java-infra-2:~# ps ax
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:01 init r2
 5498 ?        Ss     0:00 /sbin/syslogd -u syslog
 5510 ?        Ss     0:00 /sbin/klogd -P /var/run/klogd/kmsg
 5577 ?        Ss     0:00 /usr/lib/postfix/master
 5579 ?        S      0:00 pickup -l -t fifo -u -c
 5580 ?        S      0:00 qmgr -l -t fifo -u
 5586 ?        Ss     0:00 /usr/sbin/sshd
 7770 ?        Ss     0:00 sshd: root@pts/2
 7772 pts/2    Ss     0:00 -bash
 7788 pts/2    Rl     0:00 /usr/lib/jvm/java-1.5.0-sun-1.5.0.06/bin/java -server 7799 pts/2    R+     0:00 ps ax
Akcije #56

Izmjenjeno od Ernad Husremović prije više od 18 godina

ovo je da poludiš, sa interneta nikako ne dolaze pozivi pop3, imap, 5222 ali dolaze smtp 80 ??!

root@sc_linksys_1:~# iptables -L -t nat | grep 110

root@sc_linksys_1:~# iptables -L -t nat | grep 110
DNAT       tcp  --  anywhere             anywhere            tcp multiport dports 143,993,110,995 to:192.168.45.16
DNAT       tcp  --  anywhere             anywhere            tcp multiport dports 143,993,110,995 to:192.168.45.16

Akcije #57

Izmjenjeno od Ernad Husremović prije više od 18 godina

nakon toga počeo mi je ez-ipupdate prijavljivanti neku grešku 404

pa onda su je i pristup www stranicama otkazao lan -> internet ...

ovo je nevjerovatno ...

na kraju sam vratio router-sa i sve radi.

Akcije #58

Izmjenjeno od Ernad Husremović prije više od 18 godina

znači:
  • sc_linksys_1 ima nekakve probleme sa firewalom
  • ez-ipupdate je takođe sumnjiv

ili sam ja teški baksuz pa je ovo prolupalo radi bihneta ??!

Akcije #59

Izmjenjeno od Ernad Husremović prije više od 18 godina

ma idem ponovo pokušati sa linksis-om

Akcije #60

Izmjenjeno od Ernad Husremović prije više od 18 godina

na kraju, sve je ipak bilo do podešenja firewall-a

evo testova:

[root@ernadh ~]# telnet mail.sigma-com.net 110
Trying 89.146.138.27...
Connected to mail.sigma-com.net.
Escape character is '^]'.
+OK if Cyrus POP3 v2.1.15 server ready <3185467114.1158649705@if>
quit
+OK
Connection closed by foreign host.
[root@ernadh ~]# telnet mail.sigma-com.net 5222
Trying 89.146.138.27...
Connected to mail.sigma-com.net.
Escape character is '^]'.
Connection closed by foreign host.
[root@ernadh ~]# telnet mail.sigma-com.net 80
Trying 89.146.138.27...
Connected to mail.sigma-com.net.
Escape character is '^]'.
quit
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>502 Proxy Error</title>
</head><body>
<h1>Proxy Error</h1>
<p>The proxy server received an invalid
response from an upstream server.<br />
The proxy server could not handle the request <em><a href="/">quit&nbsp;/</a></em>.<p>
Reason: <strong>Error reading from remote server</strong></p></p>
</body></html>
Connection closed by foreign host.
[root@ernadh ~]# telnet mail.sigma-com.net 25
Trying 89.146.138.27...
Connected to mail.sigma-com.net.
Escape character is '^]'.
220 mail-gw-10.sigma-com.net ESMTP Postfix (Ubuntu)
quit
221 Bye
Connection closed by foreign host.
[root@ernadh ~]#

Akcije #61

Izmjenjeno od Ernad Husremović prije više od 18 godina

poslao sam test sigma-com.net -> gmail.com i reply, sve radi u roku od par sekundi

Akcije #62

Izmjenjeno od Ernad Husremović prije više od 18 godina

jutros provjerio sve je ok

[root@ernadh ~]# telnet jabber.bring.out.ba 5222
Trying 89.146.138.27...
Connected to jabber.bring.out.ba.
Escape character is '^]'.
Connection closed by foreign host.
[root@ernadh ~]# telnet jabber.bring.out.ba 110
Trying 89.146.138.27...
Connected to jabber.bring.out.ba.
Escape character is '^]'.
+OK if Cyrus POP3 v2.1.15 server ready <3310579077.1158674356@if>
quit

sad vidim da se nije ni ip officesa mjenjao ... pa dobro nije ni tako davno bilo kada sam radio test

Akcije #63

Izmjenjeno od Ernad Husremović prije više od 18 godina

čitam ovdje http://wiki.openwrt.org/OpenWrtDocs/Installing

i vidim da se sa ssh-om odmah može remotely izvršiti neka komanda i usmjeriti na moj desktop ... cool:

hernad@desk-h6:~/repos/sa/sc_linksys_1.sigma-com.net$ ssh -x root@192.168.45.1 'dd if=/dev/mtdblock/1' > firmware-backup.trx
root@192.168.45.1's password: 
7552+0 records in
7552+0 records out

hernad@desk-h6:~/repos/sa/sc_linksys_1.sigma-com.net$ ls -l  firmware-backup.trx
-rw-r--r-- 1 hernad hernad 3866624 2007-01-24 12:33 firmware-backup.trx

Akcije #65

Izmjenjeno od Ernad Husremović prije oko 17 godina

  • Status promijenjeno iz Novo u Zatvoreno
Akcije

Također dostupno kao Atom PDF