Koozali.org: home of the SME Server

FreeSwan and other things

Drifting

FreeSwan and other things
« on: April 27, 2003, 10:34:14 PM »
Well I have just rebuilt the mitel server for about the 10th time (At least it completes quickly)

What I would like to know is what can you do to stop dependancies when installing packages.

Now the reason for the question is the Port forward RPM requires a different packet filter RPM to the one Freeswan RPM requires? Confused? well I am.

Am I to take it then, that you cannot run both ?  Even old uncle bills software works with itself! Now I am willing to admit that I am fairly new to this Linux stuff, and although I am enjoying myself I feel I must let off steam about the confusing updates and rpms that all do the same job, but require different versions.  I am also not in the mood for the "read the man pages" comments. Most of them were written by an anally retentive academic, who likes to impress with big words and terse instructions, and explain? heaven forbid, they don't do things like that!

Would really like to know how to achieve Port Forwarding, IPSEC (Freeswan) and Packet filtering on the same machine. Someone must have done it on version 5.6 ?

Regards Paul.

Kelvin

Re: FreeSwan and other things
« Reply #1 on: April 28, 2003, 03:52:49 AM »
Hi Drifting,

>confusing updates and rpms that all do the same job, but require different
>versions. I am also not in the mood for the "read the man pages" comments.

Welcome to the world of Linux.

>Would really like to know how to achieve Port Forwarding, IPSEC (Freeswan)
>and Packet filtering on the same machine. Someone must have done it on
>version 5.6 ?

In case you are new to SME and have not come across this yet, check out contribs.org if you need to find add-ons, contribs and howtos specific to SME. Make sure you use the right version of contribs for the version of SME you are working with as some contribs can be version specific.

Kelvin

Ray Mitchell

Re: FreeSwan and other things
« Reply #2 on: April 28, 2003, 06:04:33 AM »
Dear Drifting

I am no expert here and am still learning myself, but this may help.

> What I would like to know is what can you do to stop
> dependancies when installing packages.

I don't think you can "stop" dependencies between packages as such, as one rpm may definitely be expecting another rpm to be present in order to work, but you can force packages to instal by using the --nodeps switch and you will not get any dependency error message during instal then.
eg
rpm -Uvh --nodeps rpmname

> Now the reason for the question is the Port forward RPM
> requires a different packet filter RPM to the one Freeswan
> RPM requires? Confused? well I am.
> Am I to take it then, that you cannot run both ?

I cannot answer that interdependency issue for you as I have not used those rpms, but I would assume it really depends on the requirements of the package.
One rpm may be happy to use (ie operate with) a different version rpm than the one it actually depends on, but you would have to force the instal using --nodeps as above. You will find out if it works OK during day to day usage. Of course the opposite may be true also (ie won't work with a different rpm) and then you may be stuck with it.

A way to get around these issues is to try to instal the packages in an order that
does not have depedency problems, but you may only find this out by trial and error.

You can also uninstal rpm packages and reinstal earlier ones that are required for dependency issues during instal, and after the instal is conplete then instal the different or newer version rpms. I spent a couple of hours uninstalling rpms until I sorted out all the depedency issues and then installed a whole lot of newer rpms to update them, and it all worked OK in the end.

You should not have to reinstal your whole operating system 10 times to sort this out though, just do
rpm -e rpmname (without the numbers)
and that will uninstal whatever you have installed, and then you can try the instal (of the particular rpms) again in a different order or using different switches.

Having said all the above, searching the contribs.org site, as Kelvin has suggested, for packages that all work together is probably the best practical answer.

> Even old uncle bills software works with itself!

I have come across plenty of examples where one version of a MS Windows product will not work when another version (of not necessarily the same product) is installed, and at other times installing a newer version cripples some parts of an older version, so I don't think these issues are Linux only !!

> .........I feel I must let off steam about the
> confusing updates and rpms that all do the same job, but
> require different versions.

I don't disagree with you here, but it seems to me that if you want to "do things yourself" in the Linux world "and reap the benefits", then you must be prepared to put in a bit of research and learning. There are helpful places like these forums and others to ask when you get stuck though.

Hope this may be of some help
Regards
Ray.

Jon Blakely

Re: FreeSwan and other things
« Reply #3 on: April 28, 2003, 04:59:46 PM »
Paul,

Both
dmc-mitel-portforwarding-0.0.1-5.noarch.rpm
and
devinfo-freeswan-1.99-6sme56.noarch.rpm  
use
e-smith-packetfilter-1.13.0-04.noarch.rpm

so you should not be getting any dependecy issues.

Jon

Drifting

Re: FreeSwan and other things
« Reply #4 on: April 28, 2003, 07:16:46 PM »
Thank you all for all your kind and helpfull comments.

Re: Ray. I did try removing the RPMs for packetfilter, but it threw up a lot of dependancies. So do I remove all?

Re: John. Thanks John, I appreciate your comments, however I have spent many month trying to get the portforwarding working, and the only one that did work was in the Soulier contrib on the Mitel FTP server site. Which by the way uses a different packet filter.

Think I shall start again, install the freeswan, then Packet, then port forward. And see what the end result is.

Regards Paul.

Drifting

Re: FreeSwan and other things
« Reply #5 on: April 28, 2003, 07:16:47 PM »
Thank you all for all your kind and helpfull comments.

Re: Ray. I did try removing the RPMs for packetfilter, but it threw up a lot of dependancies. So do I remove all?

Re: John. Thanks John, I appreciate your comments, however I have spent many month trying to get the portforwarding working, and the only one that did work was in the Soulier contrib on the Mitel FTP server site. Which by the way uses a different packet filter.

Think I shall start again, install the freeswan, then Packet, then port forward. And see what the end result is.

Regards Paul.

Ray Mitchell

Re: FreeSwan and other things
« Reply #6 on: April 29, 2003, 08:16:55 AM »
Dear Drifting

> I did try removing the RPMs for packetfilter, but it
> threw up a lot of dependancies. So do I remove all?

You really need to post the actual messages for us to make sense of your dependency issues. At a guess, sounds like you still had other packages installed that were dependent on the rpm you were uninstalling ???

Ray

Drifting

Re: FreeSwan and other things
« Reply #7 on: May 01, 2003, 12:27:56 AM »
Correct Ray.
As I said earlier it was the portforward and portopen rpms which seemed to be the problem. They are for the moment on the back burner as I am in VPN mode, and trying to get that to work. Will worry about the others for later.

Thanks Paul.

Shad Lords

Re: FreeSwan and other things
« Reply #8 on: May 02, 2003, 04:31:41 AM »
I have installed and have working freeswan and portforwarding.

These are the RPM's that I have installed.

e-smith-portforwarding-0.1.0-20
freeswan-1.99_2.4.18_5-0
freeswan-module-1.99_2.4.18_5-1es1
devinfo-freeswan-1.99-6sme56
e-smith-packetfilter-1.13.0-04


-Shad