Older Newer
Tue, 14 Jun 2005 16:54:49 . . . . ABoulogne-102-1-4-165.w193-253.abo.wanadoo.fr [cosmetic]
Tue, 14 Jun 2005 16:49:42 . . . . ABoulogne-102-1-4-165.w193-253.abo.wanadoo.fr
Tue, 14 Jun 2005 16:46:52 . . . . ABoulogne-102-1-4-165.w193-253.abo.wanadoo.fr
Tue, 14 Jun 2005 16:03:36 . . . . ABoulogne-102-1-4-165.w193-253.abo.wanadoo.fr [added debootstrap syntax, more details for the install]
Tue, 14 Jun 2005 15:48:44 . . . . ABoulogne-102-1-4-165.w193-253.abo.wanadoo.fr
Mon, 09 May 2005 10:54:23 . . . . AToulon-152-1-18-122.w83-113.abo.wanadoo.fr [cosmetic]
Wed, 06 Apr 2005 04:35:11 . . . . Kalou
Fri, 01 Apr 2005 04:25:18 . . . . Kalou
Fri, 01 Apr 2005 03:40:09 . . . . Kalou
Fri, 01 Apr 2005 03:36:57 . . . . Kalou
Fri, 01 Apr 2005 03:35:36 . . . . Kalou
Fri, 01 Apr 2005 03:03:27 . . . . Kalou
Fri, 01 Apr 2005 02:51:49 . . . . Kalou
Fri, 01 Apr 2005 02:48:49 . . . . Kalou
Fri, 01 Apr 2005 02:47:55 . . . . Kalou
Fri, 01 Apr 2005 02:46:23 . . . . Kalou [Initial rough doc]

Changes by last author:

Changed:
I am a poor linux admin, and have got only one linux box in my lab. < I heard about IPCop, one of the best Firewall Open Source Solution at this time. ---
== Goal ==

I am a poor linux admin, and have got only one linux box in my lab, and would like to > use a real firewalling solution. I heard about IPCop, one of the best Firewall > Open Source Solution at this time. 13a17

- the IPCOP CD (or the ISO image of it)

Changed:
- mount ipcop-1.4.5.iso on /vservers/ipcop/mnt/iso (from the host vserver)
FROM THE HOST VSERVER
Changed:
- ipcop:/mnt/iso# tar -zxvf ipcop-1.4.5.tgz -C /ipcop/
(this directory is the root of your ipcop vserver)

- debootstrap sid /vservers/ipcop

- (this magic command will create a minimal Debian vserver into /vserver/ipcop)

- mount ipcop-1.4.5.iso on /vservers/ipcop/mnt/iso (from the host vserver)

IN THE IPCOP VSERVER (vserver ipcop enter)

- ipcop:/mnt/iso# tar -zxvf ipcop-1.4.5.tgz -C /ipcop/ 2> /tmp/mknod-errors.txt

Changed:
- In the host server, create the missing devices: (note that I have no isdn)
- In the host server, first create the minimal required devices to run a vserver:

<code>

drwxr-xr-x root/root 0 2005-05-12 21:46:13 ipcop/dev/pts/

crw------- root/tty 136,0 2005-05-12 21:54:24 ipcop/dev/pts/0

crww-- root/tty 136,1 2005-05-12 22:36:35 ipcop/dev/pts/1

crww-- root/tty 136,2 2005-05-12 22:36:41 ipcop/dev/pts/2

crww-- root/tty 136,3 2005-05-12 22:36:00 ipcop/dev/pts/3

crw-rr root/root 5,0 2004-10-02 22:16:20 ipcop/dev/tty

crw-rr root/root 1,7 2004-10-02 22:15:40 ipcop/dev/full

crw-rw-rw- root/root 1,3 2004-10-02 22:15:48 ipcop/dev/null

crw-rr root/root 5,2 2004-10-02 22:16:01 ipcop/dev/ptmx

crw-rr root/root 1,5 2004-10-02 22:16:36 ipcop/dev/zero

lrwxrwxrwx root/root 0 2005-04-18 10:46:12 ipcop/dev/MAKEDEV -> /sbin/MAKEDEV

prw-r----- root/adm 0 2004-12-26 11:11:19 ipcop/dev/xconsole

crw-rr root/root 1,8 2004-10-02 22:16:09 ipcop/dev/random

crw-rr root/root 1,9 2004-12-17 21:13:51 ipcop/dev/urandom

</code>

Then, among the following devices, choose and create the ones that you > might need (Here I have no isdn, nor do I need the ipsec, ipnat and ip* > stuff. You might need them)

Added:
Now, let's modify the apache and sshd configuration laying > into /ipcop (from inside the vserver), to suit the configuration > of your vserver (my IPROOT is 192.168.25.1)
Added:

Now, create the right script to have your vserver start > the ipcop service from inside a chroot: >

/usr/sbin/chroot /ipcop/ httpd &