Endian 2.2rc1 and SIP

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

ClamAV on EFW community version stops services[Scanned]

Hi All,

I downloaded the latest community version of Endian a few days ago. 
Whenever I enable ClamAV, lots of services stop. Rebooting the firewall 
does not make any difference and the only thing I can do to get the 
services back up is to turn Clam off again. Can anyone suggest why this 
would be and how I can fix it?

Also, I don't seem to have any proxy logs. Is this a bug or am I doing 
something stupid? I did have logs when I first turned the proxy on but 
they disappeared after trying to turn Clam on.

One final question: can anyone recommend a good guide to setting up an 
OpenVPN client on Linux including the OpenSSL setup? A sort of dummy's 
guide would be good.

Many thanks!

David.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~
David Caldwell
Network Services

Canterbury College
New Dover Road
Canterbury
Kent
CT1 3AJ
+44(0)1227 81 1271
d.caldwell@...
~~~~~~~~~~~~~~~~~~~~~~~~~

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Re: ClamAV on EFW community version stops services[Scanned]

Hi ..
If you run top is camd / havp using 100% of the cpu ?

David Caldwell wrote:
> Hi All,
>
> I downloaded the latest community version of Endian a few days ago. 
> Whenever I enable ClamAV, lots of services stop. Rebooting the firewall 
> does not make any difference and the only thing I can do to get the 
> services back up is to turn Clam off again. Can anyone suggest why this 
> would be and how I can fix it?
>
> Also, I don't seem to have any proxy logs. Is this a bug or am I doing 
> something stupid? I did have logs when I first turned the proxy on but 
> they disappeared after trying to turn Clam on.
>
> One final question: can anyone recommend a good guide to setting up an 
> OpenVPN client on Linux including the OpenSSL setup? A sort of dummy's 
> guide would be good.
>
> Many thanks!
>
> David.
>
>   

--

-- 
Gregory Machin
CT-Net 
www.ct-net.org
greg@...
phone : +27 12 379 3497
fax   : +27 12 379 4113
Cell  : +27 72 524 8096

humans do not use the address 
below its for trapping spam. 
spamtrap  imasucker@...

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Re: ClamAV on EFW community version stops services[Scanned]

probably your virus signature files are broken. in that case, clamav 
won't start.

you could delete /usr/share/clamav/main.cvd and daily.cvd and run 
freshclam to get them again.

David Caldwell schrieb:
> I downloaded the latest community version of Endian a few days ago. 
> Whenever I enable ClamAV, lots of services stop. Rebooting the firewall 
> does not make any difference and the only thing I can do to get the 
> services back up is to turn Clam off again. Can anyone suggest why this 
> would be and how I can fix it?
>   

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Re: ClamAV on EFW community version stops services[Scanned]

Thanks for your help, Gregory. I'll see if it settles down.

Gregory Machin wrote:
> Yes on my machines once it's stabilized ie only appearing in top when 
> demanded to scan something, the the rest of the services start to 
> respond .
>
> David Caldwell wrote:
>> So, once it settles down, everything's ok?
>>
>> Gregory Machin wrote:
>>> Yes I have the same problem with my efw boxes .. non of the other 
>>> processes get a chance to run until clamd has settled down .. on 
>>> most machines thats about 30 - 60 min ..
>>>
>>>
>>> David Caldwell wrote:
>>>> Hi Gregory and thanks for your reply.
>>>>
>>>> When I enable virus scanning in the proxy section and then 'save 
>>>> and restart', I see a restartproxy process and then clamd shoots up 
>>>> to 100%. I take it this is a know problem or config issue?
>>>>
>>>> Gregory Machin wrote:
>>>>> Hi ..
>>>>> If you run top is camd / havp using 100% of the cpu ?
>>>>>
>>>>> David Caldwell wrote:
>>>>>> Hi All,
>>>>>>
>>>>>> I downloaded the latest community version of Endian a few days 
>>>>>> ago. Whenever I enable ClamAV, lots of services stop. Rebooting 
>>>>>> the firewall does not make any difference and the only thing I 
>>>>>> can do to get the services back up is to turn Clam off again. Can 
>>>>>> anyone suggest why this would be and how I can fix it?
>>>>>>
>>>>>> Also, I don't seem to have any proxy logs. Is this a bug or am I 
>>>>>> doing something stupid? I did have logs when I first turned the 
>>>>>> proxy on but they disappeared after trying to turn Clam on.
>>>>>>
>>>>>> One final question: can anyone recommend a good guide to setting 
>>>>>> up an OpenVPN client on Linux including the OpenSSL setup? A sort 
>>>>>> of dummy's guide would be good.
>>>>>>
>>>>>> Many thanks!
>>>>>>
>>>>>> David.
>>>>>>
>>>>>>   
>>>>>
>>>>>
>>>>
>>>
>>>
>>
>
>

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~
David Caldwell
Network Services

Canterbury College
New Dover Road
Canterbury
Kent
CT1 3AJ
+44(0)1227 81 1271
d.caldwell@...
~~~~~~~~~~~~~~~~~~~~~~~~~

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Re: ClamAV on EFW community version stops services[Scanned]

Thanks, I'll give that a go tomorrow.

Marco Gabriel wrote:
> probably your virus signature files are broken. in that case, clamav 
> won't start.
>
> you could delete /usr/share/clamav/main.cvd and daily.cvd and run 
> freshclam to get them again.
>
> David Caldwell schrieb:
>> I downloaded the latest community version of Endian a few days ago. 
>> Whenever I enable ClamAV, lots of services stop. Rebooting the 
>> firewall does not make any difference and the only thing I can do to 
>> get the services back up is to turn Clam off again. Can anyone 
>> suggest why this would be and how I can fix it?
>>   

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~
David Caldwell
Network Services

Canterbury College
New Dover Road
Canterbury
Kent
CT1 3AJ
+44(0)1227 81 1271
d.caldwell@...
~~~~~~~~~~~~~~~~~~~~~~~~~

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Re: Endian 2.2 RC2 Release Date

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Endian 2.2rc1 and SIP

Does anyone contribute to this list or just complaint about release dates?

I'd love to troubleshoot this issue... perhaps even help get it resolved in the eminent release 2.2rc2.

As I see it, the issue did not exist in 1.8.  I skipped 2.1.x because of issues with port forwarding and AV
updating, so I can not comment on if the issue is in that release.  

I'm seeing nothing in the SIP proxy logs... so I'm thinking that the issue may be there somewhere; though,
the issue persists even when the proxy is disabled.

I find it difficult to believe that I am the only person needing to run a SIP device behind Endian.  Can anyone
else chime in on this with some experience or a perspective?

M Knisely

-----Original Message-----
From: efw-user-bounces@... on behalf of Mike  Knisely
Sent: Wed 7/2/2008 08:32
To: efw-user@...
Subject: [Efw-user] Endian 2.2rc1 and SIP

I am using a VoIP service that does not support BYOD.  I have been using this service for a while with Endian 1.8
w/out issue; however, once I moved to 2.2rc1 I am unable to get audio into my SIP device.  Audio out works fine.

I've attempted port forwarding the ports used for the RTP stream, SIP ports, etc.  No luck.

I have also attempted to do a 1:1 NAT and it still does not function properly.

I enabled the SIP proxy with no change.  I ran siproxyd from the command line to see if I could get some debug
output.  I edited the /etc/siproxyd.conf file to trigger some messages.  I was unable to get any debug output.

Does anyone else have any suggestions regarding this?  Anyone else experiencing this issue?  I'm at a loss.

M. Knisely

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Skype and Proxy Auth

What version of Endian are you running?

To me, it looks like the ML is suggesting having your Skype devices connect across web ports.  You're systems
specifically blocks those ports requiring users pass authentication to the proxy.  I'm thinking that
won't work for you.

Are your users using Skype as an app on their PCs?  Based on your description, I'm guessing so.

You say that it works some times and not others... have you looked at using the traffic shaping and giving the
SIP traffic preference?

M Knisely

-----Original Message-----
From: efw-user-bounces@... on behalf of Luca Ballerini
Sent: Mon 6/23/2008 06:07
To: efw-user@...
Subject: [Efw-user] Skype and Proxy Auth

Hi all
I've forced clients to use proxy auth by blocking outgoing traffic to
80 - 443- 8080, everything is working fine except for skype

all skype cients have problems, first of all they disconnect often,
sometimes during chat/calls/file transfer, sometimes even if only
connected

I found a suggestion on the ML  to set

under Actions -> Options -> Connection -> Connection

"Use Port 80 for incoming connections"
- and -
"Use Port 80 and 443 for incoming alternative connections"

I did but nothing changed.

can someone help me?

thanks in advance

luca

-- 
There is no great genius without a mixture of madness.
Aristotle

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Endian 2.2rc1 and SIP

G'day Mike,
I am running 2.2rc1 in a VMWare server machine, with Asterisk on my local
lan.
I have one SIP account that works (for playing with really as I only have a
128k net connection).
I originally had it set to port forward SIP UDP 5060 and RTP 10000 to 20000
to my asterisk server.
This worked (as well as it can here)

As I wanted to use the traffic shaping to give the RTP traffic highest
priority, but couldn't define a range of ports for the traffic shaper I
decided to try the SIP proxy instead, in the hope that it may give the
traffic a higher priority. (It didn't)
So then I turned off the port forwarding and turned on the sip proxy with:

Status: Transparent
Sip Port: 5060
RTP Port Low: 10000 RTP Port High: 20000
Outbound Proxy host: is blank, Port: is blank

Autosave registrations checked
Log Calls checked
Firewall logs outgoing connections checked

Logging:
I get nothing in the sip proxy logs in the gui. I haven't had a look at the
actual files though.

I get some firewall logs of accepted connections from my asterisk server to
the SIP provider. These are UDP ports in the range of 10000 to 20000
(probably a smaller range than that, but they do fall in the range I have
set for RTP traffic)

I have seen that efw sends directly SIP registration packets to my SIP
provider, and the system still works, so I am assuming that SIP proxy is
working.

I haven't really looked hard into the whole system as it is still not a
release version and it seemed to work OK for what I want to do.

Cheers,
Col

----- Original Message -----
From: "Mike Knisely" <MKnisely@...>
To: <efw-user@...>
Sent: Thursday, July 03, 2008 10:54 AM
Subject: Re: [Efw-user] Endian 2.2rc1 and SIP

Does anyone contribute to this list or just complaint about release dates?

I'd love to troubleshoot this issue... perhaps even help get it resolved in
the eminent release 2.2rc2.

As I see it, the issue did not exist in 1.8.  I skipped 2.1.x because of
issues with port forwarding and AV updating, so I can not comment on if the
issue is in that release.

I'm seeing nothing in the SIP proxy logs... so I'm thinking that the issue
may be there somewhere; though, the issue persists even when the proxy is
disabled.

I find it difficult to believe that I am the only person needing to run a
SIP device behind Endian.  Can anyone else chime in on this with some
experience or a perspective?

M Knisely

-----Original Message-----
From: efw-user-bounces@... on behalf of Mike  Knisely
Sent: Wed 7/2/2008 08:32
To: efw-user@...
Subject: [Efw-user] Endian 2.2rc1 and SIP

I am using a VoIP service that does not support BYOD.  I have been using
this service for a while with Endian 1.8 w/out issue; however, once I moved
to 2.2rc1 I am unable to get audio into my SIP device.  Audio out works
fine.

I've attempted port forwarding the ports used for the RTP stream, SIP ports,
etc.  No luck.

I have also attempted to do a 1:1 NAT and it still does not function
properly.

I enabled the SIP proxy with no change.  I ran siproxyd from the command
line to see if I could get some debug output.  I edited the
/etc/siproxyd.conf file to trigger some messages.  I was unable to get any
debug output.

Does anyone else have any suggestions regarding this?  Anyone else
experiencing this issue?  I'm at a loss.

M. Knisely

----------------------------------------------------------------------------
----

> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08

----------------------------------------------------------------------------
----

> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08