Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
getting out from behind the firewall... [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
the.drizzle
Tux's lil' helper
Tux's lil' helper


Joined: 28 Dec 2006
Posts: 103
Location: New Zealand

PostPosted: Sun Apr 29, 2007 10:17 pm    Post subject: getting out from behind the firewall... [SOLVED] Reply with quote

Hi all!

OK, this is the first time I've ever had to work from behind a firewall, so this is all pretty new to me. That said, if I'm asking something that has been addressed 5018 times already, please don't bark at me, just point me to the solution, OK? Thanks! :)

That said, I've managed to get almost everyting working--browser, some streaming audio (minor problems still, but I'll leave them), etc. However, two *major* things are not working, and I'm stumped! In particular, I cannot seem to do an emerge --sync, the output is simply:
Code:

>>> Starting retry 3 of 3 with rsync://142.77.49.220/gentoo-portage
>>> Checking server timestamp ...
timed out
rsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(242) [receiver=2.6.8]

!!! Rsync has not successfully finished. It is recommended that you keep
!!! trying or that you use the 'emerge-webrsync' option if you are unable
!!! to use rsync due to firewall or other restrictions. This should be a
!!! temporary problem unless complications exist with your network
!!! (and possibly your system's filesystem) configuration.

and on a related problem (I think), ping doesn't seem to work either!
Code:

$ ping www.google.ca
PING www.l.google.com (66.102.7.147) 56(84) bytes of data.

--- www.l.google.com ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5009ms

emerge-webrsync just hangs... I have created the the file /etc/env.d/99local
Code:

more /etc/env.d/99local
http_proxy="http://***:3128"
ftp_proxy="ftp:/***:3128"

where I have of course deleted my username password from this post, and the output of emerge --info is
Code:

# emerge --info
Portage 2.1.2.4 (default-linux/x86/no-nptl, gcc-4.1.1, glibc-2.3.6-r4, 2.6.20-gentoo-r6 i686)
=================================================================
System uname: 2.6.20-gentoo-r6 i686 Intel(R) Celeron(R) CPU 2.40GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Mon, 23 Apr 2007 08:50:01 +0000
dev-java/java-config: 1.3.7, 2.0.31-r5
dev-lang/python:     2.4.4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i386-pc-linux-gnu"
CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
CHOST="i386-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://adelie.polymtl.ca/ ftp://gentoo.arcticnetwork.ca/pub/gentoo/ ftp://mirrors.tera-byte.com/pub/gentoo ftp://distro.ibiblio.org/pub/linux/distributions/gentoo/ ftp://ftp.gtlib.gatech.edu/pub/gentoo ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ "
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.ca.gentoo.org/gentoo-portage"
USE="X aac alsa apm arts avi berkdb bitmap-fonts bzip2 cdparanoia cdr cjk cli cracklib crypt cups directfb div4linux dri dts dvd dvdr dvdread eds emboss encode fbcon flac foomaticdb fortran gdbm gif gnome gpm gstreamer gtk gtk2 iconv imlib ipv6 isdnlog java jpeg kde libg++ libwww mad midi mikmod motif mp3 mpeg ncurses nls ogg opengl oss pam pcre perl png pppd python qt3 qt4 quicktime readline reflection sdl session spell spl sse sse2 ssl tcltk tcpd tk truetype truetype-fonts type1-fonts vorbis x86 xml xorg xv zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="i810"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS


Sorry if this is too much information, but I fugured I'd just include everything at once.

So, any ideas what I'm doing wrong?

Many thanks in advance!
_________________
But... it IS pointless!


Last edited by the.drizzle on Tue May 01, 2007 12:17 am; edited 1 time in total
Back to top
View user's profile Send private message
Hu
Administrator
Administrator


Joined: 06 Mar 2007
Posts: 23064

PostPosted: Mon Apr 30, 2007 4:19 am    Post subject: Reply with quote

Whose firewall is it that you are operating behind? Can you contact the firewall administrator and inquire what it is configured to block?

The first thought that strikes me from your output is that the server you are contacting for rsync is either down, or blocked by the firewall. If the latter, it is probably blocked because it is the rsync port, not because of any specific IP address. This may simply mean that your network administrator has configured the firewall to deny all traffic he did not consider "legitimate." You may be able to convince him that using rsync is legitimate traffic, and get it allowed.

As for your problems with emerge-webrsync: have you checked that a web browser can connect out using those same settings? Are those variables actually in your environment?
Back to top
View user's profile Send private message
the.drizzle
Tux's lil' helper
Tux's lil' helper


Joined: 28 Dec 2006
Posts: 103
Location: New Zealand

PostPosted: Mon Apr 30, 2007 7:28 pm    Post subject: Reply with quote

Thanks for the input!

As for contacting the system admin, that's not going to happen. This is the work computer that "they" gave me, and the network is run by a 72 year old guy. When I asked to have my box changed to linux, he refused on the grounds that linux is unproven and insecure. Instead, I was supposed to use Windows 2000, which they recently upgraded to from Windows 3.x (I really wish I was joking about this).

As a result, this box has been set to access the local network, and hence the internet, via some sneaky means since it now has gentoo on it--somehow that happened! :)

So yeah, I cannot ask for help from the system admin.

However, I was wondering if you could tell me some more about using emerge-webrsync with a browser? Until yesterday, I have never even heard of this app, and being as it comes with no man page I am not sure what it is trying to do... Somehow grab a "mostly" current snapshot via http somehow or something like that? And how do I use it with a browser?

Thanks in advance!

***UPDATE***

OK, the problem with ping and rsync not working seems to be that the proxy server is a squid server, which means these features are not going to work. as for emerge-webrsync, further investigation indicates that I should let it run for 1-2 hours before I declare it as hanging, as it is apperantly quite slow at times, and provides no feedback while downloading the .bz2 file. It's running now, and if its all sorted in 3 hours, I'll mark this thread as solved.

Sorry for the hassle, but thanks for the input!

Cheers!

***UPDATE***

Yup, that did it. rsync and ping are out due to squid, and emerge-webrsync is just... really... slow... But that's OK--my bad for mistaking the zero feedback for a hung application (although it is understandable!).

Cheers!
_________________
But... it IS pointless!
Back to top
View user's profile Send private message
Hu
Administrator
Administrator


Joined: 06 Mar 2007
Posts: 23064

PostPosted: Tue May 01, 2007 3:08 am    Post subject: Reply with quote

the.drizzle wrote:
However, I was wondering if you could tell me some more about using emerge-webrsync with a browser? Until yesterday, I have never even heard of this app, and being as it comes with no man page I am not sure what it is trying to do... Somehow grab a "mostly" current snapshot via http somehow or something like that? And how do I use it with a browser?


Sorry, that was not what I meant. I was suggesting that you verify that using those settings (username+password+server+port) were correct by using a web browser with those settings. www-client/lynx is an especially good choice for this, since it honors the http_proxy environment variable. Of course, that could produce a chicken&egg problem if you happened not to have lynx handy inside. It is all moot now that you have Gentoo working, but I wanted to clarify for any future readers that (as far as I know) emerge-webrsync cannot be used through a browser. emerge-webrsync is a shell script, so you can read it in a text editor if you are curious how it works.

As for the lack of documentation, that would be nice to fix. Perhaps someone will write a man page and contribute it for inclusion in a future release? ;)

the.drizzle wrote:

But that's OK--my bad for mistaking the zero feedback for a hung application (although it is understandable!).


Based on a cursory examination of /usr/sbin/emerge-webrsync, this appears to be the designed behavior. I think passing a -v would make it less quiet.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum