Logrotate on flash install (2.0.4)

On my Flash install (2.0.4) logs are rotated when the log files exceeds 
a size of 4MB and checked every hour by cron. This results in truncated 
daily log files if the logs were rotated at any time other than midnight 
when viewed from the GUI.

As a workaround I have set cron to only rotate the logs at midnight 
(0 0 * * *       /usr/sbin/logrotate /etc/logrotate.conf)
So far I haven't noticed any detrimental effect of this change.

Maybe this could be considered as the default for future releases.

Bob

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Found one ccache build issue

ccache rely on a compiler signature to determine if a cache hit is valid or not.
The signature must change when the compiler is changed.

We can't rely on the compiler build date (mtime is the default signature) or each new build would create a new signature.

I made the compiler signature depend from gcc md5sum.
That's good enought when /usr/bin/gcc is changed, but not when /usr/bin/{cpp,c++} or anything else
change (in /usr/lib/gcc or /usr/lib/{libgcc_s*,libc++*}

I understand this issue after doing that simple change on lfs/gcc
+       # Remove #ident deprecation made by mistake and removed after gcc-4.4. That fix many shadows warnings
+       cd $(DIR_APP) && sed -i '/T_IDENT/s/ | DEPRECATED//' libcpp/directives.c

I was disapointed when nothing changed on shadow compilation log until I understand this issue.

For the final gcc, the solution may be to create a big tar from gcc installed files and run md5sum against.
I don't know yet what disorder may affect the md5sum, maybe gcc static libs?

For the toolchain, I don't have the list of installed files available. I will see what I can cook.

Gilles

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Build error as root on rev. 6611

I guess this is known about but just in case... The recent changes have
brought about the following build error under rev 6611 if being built by
root. I know this is not advised but some people may do this, me included.

checking for mempcpy... (cached) yes
checking for memrchr... yes
checking whether mkdir handles trailing slash... yes
checking whether mkdir handles trailing dot... yes
checking whether mkfifo rejects trailing slashes... yes
checking whether mknod can create fifo without root privileges... configure:
error: in `/storage/ipcop4/trunk/build_i486/ipcop/usr/src/coreutils-8.17':
configure: error: you should not run configure as root (set
FORCE_UNSAFE_CONFIGURE=1 in environment to bypass this check)
See `config.log' for more details
make: *** [/storage/ipcop4/trunk/files_i486/01_toolchain/coreutils-8.17]
Error 1

I shall now try and correct this bad proctice of mine and build as a normal
user.

regards,
Brian

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

snort for ipcop 2.x

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
IPCop-devel mailing list
IPCop-devel@...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

Graphs fail on recent builds.

Hello all! I notice that more recent svn builds fail to generate graphs.
The cron log shows exit status 9 for makegraphs. Manually invoking it
leaves with:

root <at> 5420:~ # makegraphs
Can't load
'/usr/lib/perl5/site_perl/5.10.1/i486-linux/auto/RRDs/RRDs.so' for
module RRDs: libffi.so.5: cannot open shared object file: No such file
or directory at /usr/lib/perl5/5.10.1/i486-linux/DynaLoader.pm line 200.
 at /usr/local/bin/makegraphs line 31
Compilation failed in require at /usr/local/bin/makegraphs line 31.
BEGIN failed--compilation aborted at /usr/local/bin/makegraphs line 31.

The interesting thing about the missing library it complains about is
that it is commented out in the libffi rootfiles. I plopped both the
real libffi and the so.5 link to it and all works well.

I'm sure there are bigger things at the moment but I thought I'd mention
it.
--

-- 
Dave Studeman
http://www.raqcop.com

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

dnsmasq Enhancement Request

G'day all,

I need to have dnsmasq send out a tftpserver address.
I don't think this change would be that hard, fo now I have just hacked  
the next-server data to spit out the tftpserver instead.

I could make the change and do a diff if that would help?

-- 
'ooroo

stinga...(:)-)
---------------------------------------------------
Email: stinga@...      o
You need only two tools.        o /////
A hammer and duct tape. If it    /@   `\  /) ~
doesn't move and it should,     >  (O)  X<  ~  Fish!!
use the hammer. If it moves and  `\___/'  \) ~
shouldn't, use the tape.           \\\
---------------------------------------------------

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Turkish Translation Team

------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2

_______________________________________________
IPCop-devel mailing list
IPCop-devel@...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

IPCop 2.0: kernel crash

Hi all,

I was facing a kernel crash this morning. I hope someone is able to
make something out of the attached last messages from the system log
prior to the crash (If someone wants it as a file I will send it
off-list):

09:35:57 kernel irq 10: nobody cared (try booting with the "irqpoll"
option) 
09:35:57 kernel Pid: 9243, comm: squid Not tainted 2.6.32-6 #1
09:35:57 kernel Call Trace:
09:35:57 kernel [<c1050982>] __report_bad_irq+0x3d/0x8f
09:35:57 kernel [<c1050acc>] note_interrupt+0xf8/0x164
09:35:57 kernel [<c104f4e3>] ? handle_IRQ_event+0x2f/0xb3
09:35:57 kernel [<c10512e9>] handle_level_irq+0x7b/0xcc
09:35:57 kernel [<c100550b>] handle_irq+0x2a/0x43
09:35:57 kernel [<c1004c7d>] do_IRQ+0x4d/0xb2
09:35:57 kernel [<c1003390>] common_interrupt+0x30/0x40
09:35:57 kernel [<c102d367>] ? __do_softirq+0x50/0x112
09:35:57 kernel [<c102d45d>] do_softirq+0x34/0x4b
09:35:57 kernel [<c102d570>] irq_exit+0x37/0x4a
09:35:57 kernel [<c1004cbd>] do_IRQ+0x8d/0xb2
09:35:57 kernel [<c1003390>] common_interrupt+0x30/0x40
09:35:57 kernel handlers:
09:35:57 kernel [<ce86ad4d>] (usb_hcd_irq+0x0/0x77 [usbcore])
09:35:57 kernel [<cebb6fb7>] (0xcebb6fb7)
09:35:57 kernel Disabling IRQ #10
09:36:30 kernel irq 11: nobody cared (try booting with the "irqpoll"
option) 
09:36:30 kernel Pid: 0, comm: swapper Not tainted 2.6.32-6 #1
09:36:30 kernel Call Trace:
09:36:30 kernel [<c1050982>] __report_bad_irq+0x3d/0x8f
09:36:30 kernel [<c1050acc>] note_interrupt+0xf8/0x164
09:36:30 kernel [<c104f4e3>] ? handle_IRQ_event+0x2f/0xb3
09:36:30 kernel [<c10512e9>] handle_level_irq+0x7b/0xcc
09:36:30 kernel [<c100550b>] handle_irq+0x2a/0x43
09:36:30 kernel [<c1004c7d>] do_IRQ+0x4d/0xb2
09:36:30 kernel [<c1003390>] common_interrupt+0x30/0x40
09:36:30 kernel [<c102d367>] ? __do_softirq+0x50/0x112
09:36:30 kernel [<c102d45d>] do_softirq+0x34/0x4b
09:36:30 kernel [<c102d570>] irq_exit+0x37/0x4a
09:36:30 kernel [<c1004cbd>] do_IRQ+0x8d/0xb2
09:36:30 kernel [<c1003390>] common_interrupt+0x30/0x40
09:36:30 kernel [<cec040cc>] ? acpi_processor_suspend+0x4f3/0x531
[processor] 
09:36:30 kernel [<c1164178>] cpuidle_idle_call+0x70/0xb4
09:36:30 kernel [<c1001e0d>] cpu_idle+0x8e/0xa5
09:36:30 kernel [<c11da7fb>] rest_init+0x6b/0x7e
09:36:30 kernel [<c12a49da>] start_kernel+0x2dc/0x2f2
09:36:30 kernel [<c12a40a5>] i386_start_kernel+0xa5/0xbd
09:36:30 kernel handlers:
09:36:30 kernel [<ce86ad4d>] (usb_hcd_irq+0x0/0x77 [usbcore])
09:36:30 kernel [<ce86ad4d>] (usb_hcd_irq+0x0/0x77 [usbcore])
09:36:30 kernel [<ceb99d0d>] (0xceb99d0d)
09:36:30 kernel [<cebb6fb7>] (0xcebb6fb7)
09:36:30 kernel Disabling IRQ #11
09:36:30 kernel GREEN REJECT IN=lan-1 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:19:d1:a1:94:61:08:00 SRC=192.168.2.81
DST=192.168.2.255 LEN=78 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP
SPT=137 DPT=137 LEN=58 
09:37:27 kernel ------------[ cut here]------------ 
09:37:27 kernel WARNING: at net/sched/sch_generic.c:261
dev_watchdog+0xbf/0x14f() 
09:37:27 kernel Hardware name: VT8623-8235
09:37:27 kernel NETDEV WATCHDOG: wan-1 (r8169): transmit queue 0 timed
out 
09:37:27 kernel Modules linked in: nf_conntrack_netlink nfnetlink
act_police sch_ingress cls_u32 sch_sfq sch_htb xt_MARK ipt_MASQUERADE
ipt_REDIRECT ipt_REJECT xt_mark xt_TCPMSS xt_state ipt_LOG xt_limit
iptable_mangle iptable_filter nf_nat_pptp nf_nat_proto_gre
nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_irc nf_conntrack_irc
nf_nat_h323 nf_conntrack_h323 nf_nat_ftp nf_conntrack_ftp iptable_nat
ip_tables nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 fan
battery ac processor ide_cd_mod i2c_viapro r8169 via_rhine thermal
thermal_sys floppy mii cdrom hwmon i2c_core evdev bitrev button crc32
usb_storage sd_mod usbhid hid ohci_hcd ext3 mbcache jbd ide_gd_mod
pata_via ata_generic pata_acpi libata ide_pci_generic via82cxxx
ehci_hcd uhci_hcd usbcore ide_core pcspkr [last unloaded:
scsi_wait_scan] 
09:37:27 kernel Pid: 0, comm: swapper Not tainted 2.6.32-6 #1 09:37:27
kernel Call Trace: 
09:37:27 kernel [<c1028386>] warn_slowpath_common+0x70/0x98 
09:37:27 kernel [<c1186f07>] ? dev_watchdog+0xbf/0x14f 
09:37:27 kernel [<c102840d>] warn_slowpath_fmt+0x2f/0x43 
9:37:27 kernel [<c1186f07>] dev_watchdog+0xbf/0x14f 
09:37:27 kernel [<c1037bf8>] ? insert_work+0x50/0x69 
09:37:27 kernel [<c103814a>] ? __queue_work+0x37/0x4e 
09:37:27 kernel [<c103142b>] run_timer_softirq+0x11e/0x184 
09:37:27 kernel [<c1186e48>] ? dev_watchdog+0x0/0x14f 
09:37:27 kernel [<c102d39c>] __do_softirq+0x85/0x112 
09:37:27 kernel [<c102d45d>] do_softirq+0x34/0x4b 
09:37:27 kernel [<c102d570>] irq_exit+0x37/0x4a
09:37:27 kernel [<c1004cbd>] do_IRQ+0x8d/0xb2 
09:37:27 kernel [<c1003390>] common_interrupt+0x30/0x40 
09:37:27 kernel [<cec040cc>] ? acpi_processor_suspend+0x4f3/0x531
[processor] 
09:37:27 kernel [<c1164178>] cpuidle_idle_call+0x70/0xb4 
09:37:27 kernel [<c1001e0d>] cpu_idle+0x8e/0xa5 
09:37:27 kernel [<c11da7fb>] rest_init+0x6b/0x7e
09:37:27 kernel [<c12a49da>] start_kernel+0x2dc/0x2f2 
09:37:27 kernel [<c12a40a5>] i386_start_kernel+0xa5/0xbd 
09:37:27 kernel ---[ end trace abb683f71f21ba1c ]--- 
09:37:27 kernel RED DROP IN=wan-1 OUT=
MAC=00:19:5b:5b:ba:31:b0:c6:9a:60:c1:40:08:00 SRC=69.171.242.74
DST=90.184.69.179 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=51949 DF
PROTO=TCP SPT=80 DPT=46440 WINDOW=0 RES=0x00 ACK RST URGP=0 
09:37:27 kernel r8169: wan-1: link up 
09:37:30 kernel GREEN REJECT IN=lan-1 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:19:d1:a1:94:61:08:00 SRC=192.168.2.81
DST=192.168.2.255 LEN=262 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP
SPT=138 DPT=138 LEN=242 
09:37:59 kernel GREEN REJECT IN=lan-1 OUT=
MAC=00:40:63:d6:2c:63:aa:00:8b:7d:f8:77:08:00 SRC=192.168.2.2
DST=192.168.2.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=16182 PROTO=UDP
SPT=53 DPT=39124 LEN=42 
09:38:03 kernel r8169: wan-1: link up 
09:38:40 kernel GREEN REJECT IN=lan-1 OUT=
MAC=00:40:63:d6:2c:63:aa:00:8b:7d:f8:77:08:00 SRC=192.168.2.2
DST=192.168.2.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=16183 PROTO=UDP
SPT=53 DPT=39124 LEN=42 
09:38:55 kernel r8169: dmz-1: link up 
09:39:03 kernel r8169: wan-1: link up 
09:39:10 kernel GREEN REJECT IN=lan-1 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:08:02:95:74:d3:08:00 SRC=192.168.2.80
DST=192.168.2.255 LEN=260 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP
SPT=138 DPT=138 LEN=240 
09:39:10 kernel GREEN REJECT IN=lan-1 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:08:02:95:74:d3:08:00 SRC=192.168.2.80
DST=192.168.2.255 LEN=237 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP
SPT=138 DPT=138 LEN=217 
09:39:49 kernel ORANGE REJECT IN=dmz-1 OUT=
MAC=01:00:5e:00:00:01:f4:ec:38:bd:62:fd:08:00 SRC=0.0.0.0 DST=224.0.0.1
LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
09:39:49 kernel r8169: dmz-1: link up

-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------

------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2

_______________________________________________
IPCop-devel mailing list
IPCop-devel@...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

[ ipcop-Bugs-3516627 ] dnsmasq needs setting for upstream dns for local domain

Bugs item #3516627, was opened at 2012-04-10 13:32
Message generated for change (Tracker Item Submitted) made by dhowdeshell
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3516627&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: General
Group: 2.0.0
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Don Howdeshell (dhowdeshell)
Assigned to: Nobody/Anonymous (nobody)
Summary: dnsmasq needs setting for upstream dns for local domain

Initial Comment:
This is my first entry on sourceforge and I'm not familiar with etiquette, so please forgive newbie mistakes.

A bugfix listed here
https://sourceforge.net/tracker/index.php?func=detail&aid=2806823&group_id=40604&atid=428516
changes calls to the DNSMASQ daemon to use the `--local=$DOMAINNAME` switch that causes the service not
to pass DNS queries to upstream servers for the local domain.

While this is a good default, some of us have our DNS configured properly with external servers and this
option causes that external DNS to stop working within our network.  

I've confirmed that removing that option from /etc/rc.d/rc.dnsmasq OR commenting out
`except-interface=wan-1' in /var/ipcop/dhcp/dnsmasq.conf both result in IPCop using upstream DNS
for the local domain.  

An appropriate place to put such an option might be in /var/ipcop/dhcp/dnsmasq.local (since it is not
supposed to be overwritten by updates) and when rc.dnsmasq loads the daemon it could parse that file to
look for a 'always_use_upstream_dns=1' option.  

I don't know how these sort of things get worked out, but I could supply a patch file for rc.dnsmasq if that is
what is expected. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3516627&group_id=40604

------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev

glib /pkg-config upgrade

I figured how to solve or hide the glib test failures during glib upgrade to 2.30.3.
I really solve GDateTime issue using TZDIR=/usr/share/zoneinfo/posix during tests.
For the dbus error, I managed to skip bus tests as we have no usage if dbus.

But I am still battling  to build glib-2.30 without python.
Probably building Python before glib will the easiest.

What do you mind about the python move?

When glib build is ok, I will next work on pgkconfig-0.26 (and build both at the beginning of ipcop stage).

Gilles

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure