Messages

1

C1000/3x00 General discussions / Vpn-client On C3k

« on: August 23, 2005, 04:01:06 pm »

well duh, of course i created the /var/run/vpnc/ dir the first time and not the second

you might want to add a check for it in your script

Good point! Version 0.1.4 now creates /var/run/vpnc if missing

 ~ pipacs.

2

C1000/3x00 General discussions / Vpn-client On C3k

« on: August 19, 2005, 04:39:23 pm »

One more thing. If you upgrade Viperin-Z, make sure vpnc is upgraded as well. The supported version is 0.3.3 and it's in the feed, too: http://viperinz.sourceforge.net/feed

 ~ pipacs.

3

C1000/3x00 General discussions / Vpn-client On C3k

« on: August 19, 2005, 04:34:11 pm »

I made some progress since the introduction of Viperin-Z. Most notably:

- Version 0.1.2 fixes the uninstall and vpnc detection bugs

- An experimental version 0.1.3 is now available from the feed which adds support for vpnc options "Enable Single DES", "UDP Encapsulate" and "Disable NAT Traversal". Experimental, because my provider doesn't require any of these, so I can't try them out.

To answer the question on how a successful connection is detected: I check /var/run/vpnc/pid for a vpnc process ID, then verify if a process with the given ID really exists.

 ~ pipacs.

4

C1000/3x00 General discussions / Vpn-client On C3k

« on: May 12, 2005, 07:24:21 pm »

OK.  Looks like it's connecting fine.  I see a good ip address on tun0.  Your GUI doesn't provide any sort of feedback though.  The lock remains in an "unlocked" position and still says "Not Connected" even though I'm passing through tun0.

Well, at least it's connecting... The GUI is monitoring /var/run/vpnc/vpnc.pid - do you have this file when connected? What are its permissions?

Is there maybe another qtopia lib I'm missing?

Don't think so (assuming you got the one in the feed)

 ~ pipacs.

5

C1000/3x00 General discussions / Vpn-client On C3k

« on: May 12, 2005, 03:08:52 pm »

I installed the latest cersion of viperinz and haven't got that to work.  Doesn't look like there's any error, but it does nothing.  Doesn't provide any feedback.  Just says Not connected.

If you've got some time and willing  to help with debugging viperinz:

1. Replace /usr/bin/viperinz-connect with this  debug version

2. sudo chmod a+rx /usr/bin/viperinz-connect

3. Try to connect again

4. Look for vpnc errors in /var/log/viperinz.log

5. Check if the config file in /var/run/vpnc/viperinz.conf looks sane

Thanks!

6

C1000/3x00 General discussions / Vpn-client On C3k

« on: May 12, 2005, 01:49:37 pm »

... or maybe not. The busybox mknod seems to work fine on the C3000. Are you running vpnc as root?

7

C1000/3x00 General discussions / Vpn-client On C3k

« on: May 12, 2005, 12:59:49 pm »

Has anybody actually gotten tun to work?  I get the module loaded fine.  the char device exists with 10, 200.  But I still get "can't open /dev/net/tun..." when I try to run vpnc.  It goes through all the prompts for gateway, ids and passwords before I get the error message.

I found this on Jens' site:

You will need the tun device of the kernel and iproute. Be carefull, busybox has a bug at the moment making it impossible to create /dev/net/tun with the correct mayor and minor numbers. This is why I included /dev/net/tun in the vpnc package.

I guess I should update my package, too...

8

C1000/3x00 General discussions / Vpn-client On C3k

« on: May 11, 2005, 05:10:49 pm »

Check out the feed at viperinz.sf.net/feed - it has both tun and ipsec for the stock C3000 kernel.

Btw. I just released the first alpha of  Viperin-Z which is a GUI for managing vpnc connections - comments are welcome!

9

Security and Networking / Viperin-z

« on: May 11, 2005, 05:00:36 pm »

Viperin-Z is a Zaurus taskbar applet for managing virtual network connections. It's in early alpha state but here is the link for the brave one:

  http://viperinz.sf.net .

Tested on an SL-C3000. The feed at http://viperinz.sf.net/feed has the IPKG and all the dependent packages. Please use the SF  discussion forum and bug database for feedback

 ~ Pipacs.