Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  news  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
Password Recovery Resources on the Net
[<prev] [next>] [thread-next>] [month] [year] [list]
Date: Tue, 14 Apr 2009 19:40:02 +0400
From: gremlin@...mlin.ru
To: owl-users@...ts.openwall.com
Subject: OpenVZ vs. 802.1q VLAN

TWIMC: it appears that OpenVZ patch breaks 802.1q VLAN support at
least for 2.6.24 kernel. Checked on both i386 and x86-64 platforms
connected to my old good Cisco Catalyst 2950 - while vanilla 2.6.24
kernel works just fine, rebuilding it with OpenVZ patch causes it
to discard network packets like if they were destined to unknown
VLAN number.

I was unable to check this on stable OpenVZ version, as kernel
2.6.18 does not support my hardware, but problem should persist
there as well.

Temporary(?) solution: if you don't use the CONFIG_VE_ETHDEV aka
"virtual ethernet device" (and you normally don't) you can revert
the OpenVZ patch for net/8021q/* files in the kernel source tree
to get working kernel. PLEASE NOTE: this solution is NOT CHECKED
thoroughly and should be used only as a TEMPORARY measure to get
your server working here and now.

For people who are not experienced kernel hackers I made two files:
ftp://home.gremlin.ru/pub/linux/Owl/patches/ovz-2.6.24-vlan.diff
(should be applied to kernel source tree after OpenVZ patch) and
ftp://home.gremlin.ru/pub/linux/Owl/kernel/linux-2.6.24-ovz.tar.gz
(the complete kernel source). Once again: they are EXPERIMENTAL.


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin
<gremlin ðòé gremlin ôþë ru>

-- 
To unsubscribe, e-mail owl-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux