Feature/ipset #41
Feature/ipset #41
Conversation
| New Features | ||
| * Adding ipset support for inline mode | ||
| * Adding support for multivlan in inline mode | ||
| * Adding support of portal profil by vlan |
|
Does this fixes #1424 for all supported platforms? http://packetfence.org/bugs/view.php?id=1424 |
| @@ -16,6 +16,8 @@ Depends: ${misc:Depends}, apache2, apache2.2-common, apache2-utils, | |||
| openssl, openssl-blacklist, openssl-blacklist-extra, php-log, snort, | |||
| mysql-server, libapache2-mod-proxy-html, libapache2-mod-php5, php-pear, | |||
| php5-mysql, php5-gd, perl-suid, make, | |||
| # ipset (ipset must be installed by hand apt-get install xtables-addons-common xtables-addons-source) | |||
There was a problem hiding this comment.
installed by hand? reason?
There was a problem hiding this comment.
You must have to compil the kernel module by module-assistant auto-install xtables-addons.
So when you install packetfence with apt-get you can´t build the module in the init script (it use dpkg that is already locked).
So i prefer to document that and install by hand.
There was a problem hiding this comment.
and how will that be handled in the liveusb creation process?
There was a problem hiding this comment.
The kernel module must be build the first time the live usb is running.
And i have a problem with installing xtables-addons-common xtables-addons-source during the build, it remove packetfence.
So by hand.
|
Debian , centos 6 and RHEL6, not centos 5 |
|
re: not on centos 5 Then one of the alternatives we discussed back in june will have to be considered. Unless we are willing to drop support for it in our next feature release. Also, I'm not sure if I buy the sudoers idea. I opposed to it earlier but you still took that direction... |
|
It´s also be possible to implement ipset on centos 5, but we have to make kernel module for at least some of the last kernel version. |
|
Warning on restart: |
|
Do we need to keep this one opened since the whole thing have been rewritten object style? |
|
no, but keep this branch on github yes, it has been deployed in some clients network |
|
Closed since this has been reworked on an object oriented base |
Allow fingerbank to be installed without packetfence on Debian
for review