From: Darryl Ross (spam_at_afoyi.com)
Date: Tue 12 Jul 2005 - 03:09:43 BST
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Herbert Poetzl wrote:
> yep, but you do not necessarily need to 'build'
> it on the machine you want to install it *hint*
You could give us some credit.
> no, I'm just saying that ip hiding is not a matter
> of newer tools, it primarily requires a recent
> kernel and linux-vserver patch ...
Just using the 1.9.5 kernel patch does not seem to hide the IP addresses.
Doing some reading I found something which said that the default is to
not hide the addresses and a flag must be given to do this. This is
contrary to my experiences on a RH box, but does match the behavior I'm
seeing on these Woody boxes.
The woody kernel was built with the following options:
#
# Linux VServer
#
CONFIG_VSERVER_LEGACY=y
CONFIG_VSERVER_LEGACYNET=y
# CONFIG_VSERVER_PROC_SECURE is not set
# CONFIG_VSERVER_HARDCPU is not set
# CONFIG_INOXID_NONE is not set
# CONFIG_INOXID_UID16 is not set
# CONFIG_INOXID_GID16 is not set
CONFIG_INOXID_UGID24=y
# CONFIG_INOXID_INTERN is not set
# CONFIG_INOXID_RUNTIME is not set
# CONFIG_VSERVER_DEBUG is not set
Please note that we're still using the legacy config structure on the
particular machine we're having the current problem because we're having
other issues with the new config structure.
Regards
Darryl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFC0yZn/XQ6DbmPjokRAkvhAJ0YReJ1EEbSjVKNmx7wDRq6Pw7AWACgg+09
5bqkS0OonMbCXJHRJugNk48=
=Slmo
-----END PGP SIGNATURE-----
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver