invoking ipsvd-cdb

invoking ipsvd-cdb

[George Georgalis]

ipsvd-cdb(8) and ipsvd-instruct(6) have been helpful, but is there
an example of a typical "dir" for ipsvd-cdb invocation?

I'm moving from tcprules but not sure how to build the cdb files
with ipsvd-cdb.

// George

-- 
George Georgalis, systems architect, administrator <IXOYE><
http://galis.org/ cell:646-331-2027 mailto:george@galis.org

Re: invoking ipsvd-cdb

[Wayne Marshall]

On Mon, 16 Jan 2006 17:22:29 -0500
"George Georgalis" <george@galis.org> wrote:

> ipsvd-cdb(8) and ipsvd-instruct(6) have been helpful, but is there
> an example of a typical "dir" for ipsvd-cdb invocation?
> 
> I'm moving from tcprules but not sure how to build the cdb files
> with ipsvd-cdb.
>

There are a growing number of runit-based service definitions available
on the slackmatic website in the "guinix" repository:

  http://slackmatic.org/site.cgi?repoview=guinix

Many of these have default "iprules" instructions set up in an
iprules sub-directory within the service directory.  The run script
conventions used for these services make sure the rules are recompiled
each time the service is restarted.

The files in the repository are browsable even for those not using
Slackware/slackmatic.

Wayne

Re: invoking ipsvd-cdb

[George Georgalis]

On Thu, Jan 19, 2006 at 10:15:16AM -0800, Wayne Marshall wrote:
>On Mon, 16 Jan 2006 17:22:29 -0500
>"George Georgalis" <george@galis.org> wrote:
>
>> ipsvd-cdb(8) and ipsvd-instruct(6) have been helpful, but is there
>> an example of a typical "dir" for ipsvd-cdb invocation?
>> 
>> I'm moving from tcprules but not sure how to build the cdb files
>> with ipsvd-cdb.
>>
>
>There are a growing number of runit-based service definitions available
>on the slackmatic website in the "guinix" repository:
>
>  http://slackmatic.org/site.cgi?repoview=guinix

interesting, saw a couple nice scripts.

>Many of these have default "iprules" instructions set up in an
>iprules sub-directory within the service directory.  The run script
>conventions used for these services make sure the rules are recompiled
>each time the service is restarted.

I try to avoid "helpers" like that. it's when the ip
rules change that a new cdb should be generated...

# cat /var/service/qmail-smtpd/peers.sh                                                                    
#!/bin/sh
cd `dirname $0` && ipsvd-cdb peers.cdb peers.tmp peers

that way whenever you've changed anything under ./peers
you've nearly typed the command to update the cdb too.
The other way, people are liable to restart services
whenever they change a ip rule.

// George


-- 
George Georgalis, systems architect, administrator <IXOYE><
http://galis.org/ cell:646-331-2027 mailto:george@galis.org

Re: invoking ipsvd-cdb

[Wayne Marshall]

On Fri, 20 Jan 2006 00:48:28 -0500
"George Georgalis" <george@galis.org> wrote:

> 
> >Many of these have default "iprules" instructions set up in an
> >iprules sub-directory within the service directory.  The run script
> >conventions used for these services make sure the rules are
> >recompiled each time the service is restarted.
> 
> I try to avoid "helpers" like that. it's when the ip
> rules change that a new cdb should be generated...
> 
> #
> cat /var/service/qmail-smtpd/peers.sh #!/bin/sh
> cd `dirname $0` && ipsvd-cdb peers.cdb peers.tmp peers
> 
> that way whenever you've changed anything under ./peers
> you've nearly typed the command to update the cdb too.
> The other way, people are liable to restart services
> whenever they change a ip rule.
>

Yes, the slackmatic runit packages all follow similar conventions and
all use the same simple "iprules-make" utility included with the
slackmatic ipsvd package.  This utility can be run in the service
directory to update the cdb anytime without restarting the service.

Wayne

Re: invoking ipsvd-cdb

[George Georgalis]

On Mon, Jan 16, 2006 at 05:38:34PM -0500, George Georgalis wrote:
>(reposting to correct list...)
>
>ipsvd-cdb(8) and ipsvd-instruct(6) have been helpful, but is there
>an example of a typical "dir" for ipsvd-cdb invocation?
>
>I'm moving from tcprules but not sure how to build the cdb files
>with ipsvd-cdb.

While I found http://smarden.org/ipsvd/examples.html
somehow http://smarden.org/ipsvd/examples.html#instruct
evaded me. Found. Thank you.

// George


-- 
George Georgalis, systems architect, administrator <IXOYE><
http://galis.org/ cell:646-331-2027 mailto:george@galis.org