search for: hipfw

...ubuntu and although he is now building the Fedora/Centos rpms for me, he leaves much of the testing to me..... Anyway for any kernel prior to 2.6.27, I have to run the hip code in userspace, not kernel space. This is due to the ESP BEET patch. There is a specific hipd for userspace, but the hipfw requires a different option. For a while, everytime I would get a new rpm, I would have to modify /etc/init.d/hipfw to add this to OPTIONS. Then we added support for /etc/defaults/hipfw to have the OPTIONS. Worked just fine in ubuntu so he released it. And things stopped working for me in C...

...IPL rpm builds over to running from rpms built directly by the HIPL team (http://infrahip.hiit.fi/hipl/release/1.0.4/). I did the 'make uninstall' and then 'yum install hipl-all', but the hipl-firewall rpm did not install. Seems like I have a mess on my system with the various hipfw files. I 'manually' deleted a bunch of them (perhaps a mistake), and then tried 'yum install hipl-firewall' and it reported that it was installed. So I tried a 'yum erase hipl-firewall' and got two errors: hipfw: unrecognized service error reading information on servic...

I am trying to erase an rpm with yum erase. It fails: service hipfw does not support chkconfig Removed: hipl-firewall.i386 0:1.0.4.1 Complete! And it is not removed.... If I try with rpm -e, I get the same error message. So how do I remove this rpm?

...m/hip/ You don't need the src rpm, the others will do. Since we do not have the IPsec ESP BEET mode patch (http://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-09.txt) for the 2.6.18 kernel (it is in the 2.6.27 kernel), we have to run HIP in userspace. For this you have to run hipfw with at least -i to get the userspace mode working. You should also include -A if you want to accept any HIP traffic. Well read the hipfw docs. If anyone does try it, let me know.