**** BEGIN LOGGING AT Thu Jul 12 02:59:58 2012
Jul 12 11:18:02 <JonTheNiceGuy> Hi :)
Jul 12 11:19:15 <blathijs> Hi Jon!
Jul 12 11:19:51 <JonTheNiceGuy> Just amended #1178 with the smaller pool.
Jul 12 11:20:37 <JonTheNiceGuy> I think I'm going to struggle with doing the patch for the static IPs though.
Jul 12 11:20:38 <blathijs> Yeah, I noticed. Looks perfect.
Jul 12 11:20:46 <blathijs> Cool!
Jul 12 11:21:25 <JonTheNiceGuy> I don't really know where to start with adding to the web ui for the clients...
Jul 12 11:22:20 <blathijs> Let me have a look
Jul 12 11:22:24 <JonTheNiceGuy> OK
Jul 12 11:23:58 <blathijs> The luci stuff is in luci/applications/luci-openvpn/luasrc
Jul 12 11:24:11 <blathijs> view/openvpn_table.htm currently generates the table
Jul 12 11:24:45 <blathijs> But that's currently really just a "display only" table, so it doesn't actually save stuff yet
Jul 12 11:25:00 <blathijs> so that needs some non-trivial changes, I guess
Jul 12 11:25:18 <JonTheNiceGuy> Yehr
Jul 12 11:25:32 <blathijs> Let me just finish something else and then see if I can work out the luci changes later this afternoon (or possibly tomorrow)
Jul 12 11:25:59 <blathijs> In the meanwhile, perhaps you can start by manually editing /etc/config/openvpn and working on the other scripts?
Jul 12 11:33:50 <JonTheNiceGuy> I'm probably going to be tied up with work all afternoon (I'm on my lunch right now), but this evening I'll take a look, assuming I've not overlooked something the wife and I are supposed to be doing!
Jul 12 11:55:06 <blathijs> hehe
Jul 12 12:09:43 <JonTheNiceGuy> Is #907 still on track for 2.3.7.0?
Jul 12 12:10:49 <blathijs> JonTheNiceGuy: Yes, but I was going to tackle a few OpenVPN related tickets at the same time
Jul 12 12:10:54 <blathijs> saves time on testing :-)
Jul 12 12:13:53 <JonTheNiceGuy> Fair enough :)
Jul 12 12:14:36 <JonTheNiceGuy> I think most people will change the UDP port of the OpenVPN server to UDP53 :)
Jul 12 12:16:31 <blathijs> hehe
Jul 12 12:16:38 * blathijs is off for lunch, bbl
Jul 12 13:35:55 <JonTheNiceGuy> blathijs: Have you seen sslh? I can't see it ever being built into the device, but it's a nice idea for an application :)
Jul 12 13:36:12 <JonTheNiceGuy> http://www.rutschle.net/tech/sslh.shtml
Jul 12 13:43:34 <blathijs> Hmm, that looks funky
Jul 12 13:44:13 <JonTheNiceGuy> Yehr I know.
Jul 12 13:44:28 <blathijs> Probably a bit tricky to implement in an easy-to-use manner in the Fonera firmware, though
Jul 12 13:44:45 <JonTheNiceGuy> Yehr, I know right... like I said, I can't see it happening... but :)
Jul 12 13:45:20 <JonTheNiceGuy> For me in IT Security, biggest issue is that as it's a proxy, it hides the source addresses for everything
Jul 12 13:45:52 <blathijs> I wonder if it could be implemented using iptables rules...
Jul 12 13:45:54 <JonTheNiceGuy> So, if you've got an HTTPS server, and it gets attacked, you'll only ever see the source IP of 127.0.0.1 or the IP of the host if you're pointing it into your network.
Jul 12 13:46:17 <blathijs> If sslh keeps decent logs, that doesn't need to be a problem, though
Jul 12 13:47:11 <blathijs> ok, finished my work on not supporting ext4
Jul 12 13:47:21 <JonTheNiceGuy> On not supporting ext4?
Jul 12 13:47:31 <blathijs> Yeah, that wasn't a typo
Jul 12 13:48:13 <blathijs> ext4 support is considered unstable before 2.6.28, and we run 2.6.21 / 2.6.26, so the Fonera can't meaningfully support ext4
Jul 12 13:48:44 <blathijs> but I only found out about that until after writing the ext4-detection code for mountd, so I figured I might as well leave the detection code in and actually tell the user about filesystems that are unsupported
Jul 12 13:49:08 <JonTheNiceGuy> :)
Jul 12 13:49:14 <blathijs> (instead of trying to mount ext4 as ext3 and failing, as now)
Jul 12 13:50:00 <blathijs> anyway, i'm off to the shop for a bit. If I have some time after that, I'll try to whip up some openvpn-static-ip-luci-stuff
Jul 12 13:50:29 <JonTheNiceGuy> OK
Jul 12 13:50:42 <JonTheNiceGuy> Oh, with regards to the sslh-in-iptables? http://l7-filter.sourceforge.net/HOWTO
Jul 12 14:09:40 <JonTheNiceGuy> Actually, scratch that - won't work with most of the interesting protocols :D
Jul 12 15:19:09 <blathijs> hehe
Jul 12 15:36:34 <JonTheNiceGuy> Right, going home. Speak later.
**** ENDING LOGGING AT Fri Jul 13 02:59:58 2012