[ previous ] [ next ] [ threads ]
 
 From:  edward mzj <edward dot mzj at gmail dot com>
 To:  =?WINDOWS-1252?B?lSCV?= <googl3meister at gmail dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Re: A few modification to m0n0, anyone interested?
 Date:  Sat, 27 Aug 2005 23:12:31 +0800
thanks.


> I don't think anyone is too worried about your english.  One thing for
> anyone who tries this with a >=5.x system, vnconfig has been replaced
> by mdconfig, which will dynamically create the md device for you, so
> no need to "cd /dev;./MAKEDEV vn1 ..." - also note the device name
> change from vn (virtual node) to md (memory disk) and the chance to
> specify the unit number with -u.
> 
> mdconfig takes a -t option to allow the selection of the vnode device
> type, thus:
> mdconfig -a -t vnode -f /tmp/your.img -u 4
> 
> Although the vnconfig binary exists on the system, it's use it's
> pretty clear (5.4-STABLE):
> %vnconfig
> ERROR: vnconfig(8) has been discontinued
>        Please use mdconfig(8).
> 
> FreeBSD mdconfig manpage here for those interested - useful examples too...
> http://tinyurl.com/adfgk
> 
> --
> regards
> gm
> 
> upside down.
> This thread is
> 
> On 8/27/05, edward mzj <edward dot mzj at gmail dot com> wrote:
> > thank you.
> >
> > it looks like i forgot to update the image file and the patch file on
> > the web server. forgive me for my carelessness. i've fix it.
> >
> > now the link for the patch and image file are:
> > http://61.132.118.190/m0n0/1.2b9/p3.patch.latest
> > http://61.132.118.190/m0n0/1.2b9/generic-pc-1.2b9.0508262324.img
> >
> >
> > btw, how it works? any other bugs?
> >
> > thank you, again.
> >
> > 2005/8/26, J <mono at jesterchef dot com>:
> > > The SPAN feature is awesome!! I added it to my iso image, and am now
> > > running SPAN!!  Thanks a ton!!
> > >
> > > I did however have to modify /etc/rc.initial.setports
> > >
> > > I was getting the following error:
> > >
> > > -----Error--------
> > > # /usr/local/bin/php rc.initial.setports
> > > Content-type: text/html
> > > X-Powered-By: PHP/4.3.11
> > >
> > >
> > > Parse error: parse error, unexpected '{' in /etc/rc.initial.setports on
> > > line 201
> > > -----Error--------
> > >
> > > If I removed the {} around  $spanif it works.
> > >
> > > Thanks again!
> > >
> > > Jay
> > >
> > > On Thu, Aug 25, 2005 at 09:59:51PM +0800, edward mzj wrote:
> > > > news, span port support has been added
> > > > patch file
> > > > http://61.132.118.190/m0n0/1.2b9/p3.patch.latest
> > > >
> > > > img file
> > > > http://61.132.118.190/m0n0/1.2b9/generic-pc-1.2b9.0508252024.img
> > > >
> > > > to use the feature, goto system->advanced page. a option called 'Span
> > > > default rules' is appended. when enabled, all packets handled by those
> > > > machine generated default rules will be sent out the span interface.
> > > > there is also a 'span' option available when adding or editing a
> > > > firewall rule. when enabled, packets handled by that rule will be sent
> > > > out the span interface.
> > > >
> > > > befor using this feature, a physical interface must be marked as the
> > > > 'span' interface, either by the console menu, or by adding the <span>
> > > > section in the <interfaces> section in the config.xml, eg:
> > > > <span>
> > > > <if>fxp2</if>
> > > > </span>
> > > >
> > > > and the span interface must be a dedicated interface and can't be a
> > > > wireless interface, for the security reason.
> > > >
> > > > sorry for my poor english
> > > >
> > > > 2005/8/8, edward mzj <edward dot mzj at gmail dot com>:
> > > > > news, files are updated since the last post(bug fix)
> > > > >
> > > > > what's next? may be add support for 'span' interface, like span ports
> > > > > in most managable switches, so that interested traffic can be arbita
> > > > > to a packet sniffer or a snort ids.
> > > > >
> > > > > 2005/8/7, edward mzj <edward dot mzj at gmail dot com>:
> > > > > > sorry. gmail messed up the patch file. it can be downloaded @
> > > > > > http://61.132.118.190/m0n0/1.2b9/p3.patch
> > > > > >
> > > > > > 2005/8/7, edward mzj <edward dot mzj at gmail dot com>:
> > > > > > > hi guys, i just added a few codes to m0n0, enabling inbound/outbound
> > > > > > > nat on lan interface, policy outbound nat, and inbound load-balancing
> > > > > > > on a simple round-robin basis. anyone interested?
> > > > > >
>