astlinux-devel Mailing List for AstLinux

The AstLinux Team has released version 1.1.6.  All current users are encouraged to upgrade as this release addresses several security and bugfix issues. (note that no official released version of AstLinux was affected by the Heartbleed bug).

AstLinux 1.1.6 adds:

 * "phoneprov-tools" to facilitate the mass deployment of IP phones
 * Secure DNS proxy support via "DNSCrypt"
 * Asterisk - DAHDI - wanpipe - rhino version bumps
 * Web Interface enhancements and package upgrades providing important security and bug fixes.

A full changelog can be viewed in the release pages:

http://www.astlinux.org/release/116-asterisk-1181
http://www.astlinux.org/release/116-asterisk-18261

New AstLinux Documentation Topics:

IP Phone Provisioning Getting Started
http://doc.astlinux.org/userdoc:tt_ip_phoneprov_howto

IP Phone Mass Deployment
http://doc.astlinux.org/userdoc:tt_ip_phone_provisioning

DNSCrypt Proxy Server
http://doc.astlinux.org/userdoc:tt_dnscrypt_proxy

--The AstLinux Team

I think for the toolchain it is sufficient to document on the website that
some build platforms may require change to crosstools config, and specify
this one for Ubuntu.

As for the patch... we are certainly not he only folks affected!

David


On Tue, Apr 22, 2014 at 11:12 PM, Lonnie Abelbeck <li...@lo...
> wrote:

> Hi David,
>
> Thanks for the report.  Good to know the bleeding edge works (with your
> tweaks).
>
> Though I don't think we want to change the default toolchain config again
> anytime soon, but that host-m4 patch does seem pretty safe.  Googleing for
> "+#if HAVE_RAW_DECL_GETS" is a popular topic.
>
> Thanks for the research.
>
> Lonnie
>
>
>
> On Apr 22, 2014, at 9:52 PM, David Kerr wrote:
>
> > Thought I would try and build astlinux on Ubuntu 14.04.  Presently I
> build on 12.04 and have not updated Ubuntu since then because of problems
> building crosstools, but with astlinux now using a newer crosstools, I
> decided it was time to take another go.  I installed 32-bit version of
> Ubuntu 14.04 into a VMware virtual machine, and....
> >
> > 1) Crosstools needs config change...
> > In ct-ng menuconfig / companion libraries I had to set MPFR version to
> 3.1.2
> > I also did "apt-get install libmpfr-dev" though I did that as part of my
> experimenting before discovering that I should try changing the version
> number, so I don't know if this is required or not.
> >
> > 2) Building astlinux I ran into the same problem as documented here...
> > https://dev.openwrt.org/ticket/12005
> > I've attached the patch file I created to this email.  OpenWRT have
> incorporated this patch into their system, so probably safe to do for
> astlinux as well.
> >
> > With those two changes I was able to build current SVN version of
> astlinux.
> >
> > David
> >
> <m4-1.4.15-gets.patch>------------------------------------------------------------------------------
> > Start Your Social Network Today - Download eXo Platform
> > Build your Enterprise Intranet with eXo Platform Software
> > Java Based Open Source Intranet - Social, Extensible, Cloud Ready
> > Get Started Now And Turn Your Intranet Into A Collaboration Platform
> >
> http://p.sf.net/sfu/ExoPlatform_______________________________________________
> > Astlinux-devel mailing list
> > Ast...@li...
> > https://lists.sourceforge.net/lists/listinfo/astlinux-devel
> >
> > Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>
>
>
> ------------------------------------------------------------------------------
> Start Your Social Network Today - Download eXo Platform
> Build your Enterprise Intranet with eXo Platform Software
> Java Based Open Source Intranet - Social, Extensible, Cloud Ready
> Get Started Now And Turn Your Intranet Into A Collaboration Platform
> http://p.sf.net/sfu/ExoPlatform
> _______________________________________________
> Astlinux-devel mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>

Hi David,

Thanks for the report.  Good to know the bleeding edge works (with your tweaks).

Though I don't think we want to change the default toolchain config again anytime soon, but that host-m4 patch does seem pretty safe.  Googleing for "+#if HAVE_RAW_DECL_GETS" is a popular topic.

Thanks for the research.

Lonnie



On Apr 22, 2014, at 9:52 PM, David Kerr wrote:

> Thought I would try and build astlinux on Ubuntu 14.04.  Presently I build on 12.04 and have not updated Ubuntu since then because of problems building crosstools, but with astlinux now using a newer crosstools, I decided it was time to take another go.  I installed 32-bit version of Ubuntu 14.04 into a VMware virtual machine, and....
> 
> 1) Crosstools needs config change...
> In ct-ng menuconfig / companion libraries I had to set MPFR version to 3.1.2
> I also did "apt-get install libmpfr-dev" though I did that as part of my experimenting before discovering that I should try changing the version number, so I don't know if this is required or not.
> 
> 2) Building astlinux I ran into the same problem as documented here...
> https://dev.openwrt.org/ticket/12005
> I've attached the patch file I created to this email.  OpenWRT have incorporated this patch into their system, so probably safe to do for astlinux as well.
> 
> With those two changes I was able to build current SVN version of astlinux.
> 
> David
> <m4-1.4.15-gets.patch>------------------------------------------------------------------------------
> Start Your Social Network Today - Download eXo Platform
> Build your Enterprise Intranet with eXo Platform Software
> Java Based Open Source Intranet - Social, Extensible, Cloud Ready
> Get Started Now And Turn Your Intranet Into A Collaboration Platform
> http://p.sf.net/sfu/ExoPlatform_______________________________________________
> Astlinux-devel mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
> 
> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

Thought I would try and build astlinux on Ubuntu 14.04.  Presently I build
on 12.04 and have not updated Ubuntu since then because of problems
building crosstools, but with astlinux now using a newer crosstools, I
decided it was time to take another go.  I installed 32-bit version of
Ubuntu 14.04 into a VMware virtual machine, and....

1) Crosstools needs config change...
In ct-ng menuconfig / companion libraries I had to set MPFR version to 3.1.2
I also did "apt-get install libmpfr-dev" though I did that as part of my
experimenting before discovering that I should try changing the version
number, so I don't know if this is required or not.

2) Building astlinux I ran into the same problem as documented here...
https://dev.openwrt.org/ticket/12005
I've attached the patch file I created to this email.  OpenWRT have
incorporated this patch into their system, so probably safe to do for
astlinux as well.

With those two changes I was able to build current SVN version of astlinux.

David

Hi Christopher,

Not that I am aware of, it would require building a MIPS toolchain, new kernel config and I'm sure not all the standard packages work with non-x86 .  Though the Routerboard RB2011's 64 MB or 128 MB of RAM seems limiting.

If inexpensive hardware makes you smile, I must say so far I'm pleased with my $130 OEM Production D2550 barebone:

http://doc.astlinux.org/userdoc:board_oem_2550l2d-mxpc

It would be nice if I could get the serial port header to work as expected, possibly a BIOS issue, the Data Set Ready (DSR) is not being properly handled.

Lonnie



On Apr 14, 2014, at 1:30 PM, The Cadillac Kid wrote:

> has anyone messed around with getting astlinux to run on a MIPS processor? such as the MikroTik Routerboards?
> RB2011 Atheros 600MHz MIPS 74Kc V4.1
> 
> I really like the Routerboard hardware,,  I just really dont like their software too much.. namely that there is no Sip Proxy for it
> 
> I can run openWRT on it, but astlinux is so much more a refined product and I can have a full B2BUA in asterisk if i want also with it..
> thought id ask if anyone has tried it recently..
> 
> -Christopher

has anyone messed around with getting astlinux to run on a MIPS processor? such as the MikroTik Routerboards?

RB2011 Atheros 600MHz MIPS 74Kc V4.1

I really like the Routerboard hardware,,  I just really dont like their software too much.. namely that there is no Sip Proxy for it

I can run openWRT on it, but astlinux is so much more a refined product and I can have a full B2BUA in asterisk if i want also with it..
thought id ask if anyone has tried it recently..

-Christopher

AstLinux users and developers,

Today a serious security vulnerability in the popular encryption library OpenSSL was publicly announced.

The Heartbleed Bug
http://heartbleed.com/

http://www.openssl.org/news/secadv_20140407.txt

Fortunately, *no* official version of AstLinux is affected because AstLinux 1.1.4 and earlier used the OpenSSL 0.9.8 series which is not affected by the "heartbleed" bug.

For you developers, since 2014-01-17, revision 6359 the SVN 1.0 branch was bumped to OpenSSL 1.0.1f which *is* affected by the "heartbleed" bug.

Today, 2014-04-07, revision 6491 the SVN 1.0 branch was bumped to OpenSSL 1.0.1g which includes the fix and is not affected by the "heartbleed" bug.

So if anyone built a custom version of AstLinux with a revision in the range of 6359-6490, immediately build and install a new custom version with a revision of 6491 or later.


Additionally, the AstLinux Team had already tagged AstLinux version 1.1.5 before the "heartbleed" bug was announced, which is now deleted from our repository.

To eliminate any possible confusion, AstLinux 1.1.6 will be the next official version and AstLinux 1.1.5 will not be released. AstLinux 1.1.6 is expected to be released in the near future.


Keep in mind this "heartbleed" issue isn't limited to servers, it affects clients and desktop machines as well, perform your due diligence to eliminate any risk associated with this serious vulnerability.

Keep it secure,

The AstLinux Team

I have tinyproxy enabled on my AstLinux device as a transparent proxy (so
no client side configuration device).  Certain devices in my home (kids
laptops and iDevices identified by MAC address) are directed through the
proxy and URLs are filtered to block sites. I combine this with OpenDNS
blocking of categories of web sites.

It is not perfect... there is no per-device configuration so all devices
are subject to the same URL filtering, and HTTPS sites are not filtered,
only HTTP.  But it is a basic level of filter.

David




On Tue, Apr 1, 2014 at 4:39 PM, Darrick Hartman
<dha...@dj...>wrote:

> I think web proxy filtering can be very processor intensive and as a
> result something that I would not recommend on the same system as AstLinux.
>
> True IDS is something else we've stayed away from, mostly because of the
> processor intensive nature.
>
> Darrick
>
> -----Original Message-----
> From: Benjamin L. Naber [mailto:ben...@pr...]
> Sent: Tuesday, April 1, 2014 3:07 PM
> To: ast...@li...
> Subject: [Astlinux-devel] web content filter
>
> Greetings all,
>
> after looking around, many of the web content filters are either
> expensive, or are computer specific.
>
> I've got the understanding that a web content filter can be a variety
> methods, IP blocking, MAC blocking, URL restrictions, key word blocking,
> time controlled access and so on.
>
> Would adding something like this to Astlinux change or be against the
> fundamental core beliefs/concepts of Astlinux?
>
> I can go into deeper details and thoughts should this idea be reasonably
> entertained.
>
> ~Benjamin
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Astlinux-devel mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>

I think web proxy filtering can be very processor intensive and as a result something that I would not recommend on the same system as AstLinux. 

True IDS is something else we've stayed away from, mostly because of the processor intensive nature.

Darrick

-----Original Message-----
From: Benjamin L. Naber [mailto:ben...@pr...] 
Sent: Tuesday, April 1, 2014 3:07 PM
To: ast...@li...
Subject: [Astlinux-devel] web content filter

Greetings all,

after looking around, many of the web content filters are either expensive, or are computer specific.

I've got the understanding that a web content filter can be a variety methods, IP blocking, MAC blocking, URL restrictions, key word blocking, time controlled access and so on.

Would adding something like this to Astlinux change or be against the fundamental core beliefs/concepts of Astlinux?

I can go into deeper details and thoughts should this idea be reasonably entertained.

~Benjamin

Greetings all,

after looking around, many of the web content filters are either
expensive, or are computer specific.

I've got the understanding that a web content filter can be a variety
methods, IP blocking, MAC blocking, URL restrictions, key word blocking,
time controlled access and so on.

Would adding something like this to Astlinux change or be against the
fundamental core beliefs/concepts of Astlinux?

I can go into deeper details and thoughts should this idea be reasonably
entertained.

~Benjamin