August 2002 - Zope - Zope lists

problems with ws-ftp, firewall and zope web sever.
by Jianping Zhu 19 Aug '02

19 Aug '02

I was trying to ftp files to the zope web sever in my redhat linux sever. zope ftp uses port 8021 so After open ws_ftp, I clicked connected, in the session property/advaced i set the remote port number to 8021.network timeout to 60. in session property/General I set host name to my linux sever name which the zope websever reside in, I put the root manager name of zope website in the field of UserID and password and cliked ok it gives info as following: connecting to 128.192.47.24:34864 200 port command successfully. LIST 150 opening ascii node data connection for the list !timer cancelled blocking call !accept error: blocking call cancelled !Retrieve of folder list failed (O) I failed to do ftp with ws_ftp. Any suggestions will be greatly appreciated!! Thanks we use iptables as firewall in the linux machine the iptables.rule is as following #============================================================== # Iptables firewall script #============================================================== # Load modules modprobe ip_tables modprobe ip_conntrack modprobe ip_conntrack_ftp # Reset the rules iptables -F iptables -X iptables -Z # Setup default DROP policy iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP # Definitions IFACE="eth0" IPADDR="128.192.47.115" TNET="128.192.0.0/16" NAMESERVER_1="128.192.1.9" NAMESERVER_2="128.192.1.193" BROADCAST="128.192.255.255" DHCPS="0.0.0.0" BLAST="255.255.255.255" LOOPBACK="127.0.0.1" CLASS_A="10.0.0.0/8" CLASS_B="172.16.0.0/12" CLASS_C="192.168.0.0/16" CLASS_D_MULTICAST="224.0.0.0/4" CLASS_E_RESERVED_NET="240.0.0.0/5" P_PORTS="0:1023" UP_PORTS="1024:65535" TR_SRC_PORTS="32769:65535" TR_DEST_PORTS="33434:33523" FISHER="128.192.47.142" #==================================================================== ## Kernel Flags # Disable response to ping /bin/echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all #Disable response to broadcasts /bin/echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts # Don't Accept source routed packets /bin/echo "0" > /proc/sys/net/ipv4/conf/all/accept_source_route # Disable ICMP redirect acceptance /bin/echo "0" > /proc/sys/net/ipv4/conf/all/accept_redirects # Enable bad error message protection /bin/echo "1" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses # Turn on reverse path filtering (prevent IP spoofing) for interface in /proc/sys/net/ipv4/conf/*/rp_filter; do /bin/echo "1" > ${interface} done # Don't Log spoofed packets, source routed packets, redirect packets /bin/echo "0" > /proc/sys/net/ipv4/conf/all/log_martians # Turn off IP forwarding /bin/echo "0" > /proc/sys/net/ipv4/ip_forward #==================================================================== # Rules ## LOOPBACK # Allow unlimited traffic on the loopback interface. iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT #======================================================================= ## SYN-FLOODING PROTECTION # This rule maximises the rate of incoming connections. In order to do # this we divert tcp packets with the SYN bit set off to a user-defined # chain. Up to limit-burst connections can arrive in 1/limit seconds # ..... in this case 4 connections in one second. After this, one # of the burst is regained every second and connections are allowed again. # The default limit is 3/hour. The default limit burst is 5. # # iptables -N syn-flood # iptables -A INPUT -i $IFACE -p tcp --syn -j syn-flood # iptables -A syn-flood -m limit --limit 1/s --limit-burst 4 -j RETURN # iptables -A syn-flood -j DROP ## Make sure NEW tcp connections are SYN packets # iptables -A INPUT -i $IFACE -p tcp ! --syn -m state --state NEW -j LOG \ # --log-prefix "NonSYN New TCP: " --log-level warn # iptables -A INPUT -i $IFACE -p tcp ! --syn -m state --state NEW -j DROP #===================================================================== ## Fragments # Deny and log all fragments except those from Fisher(nfs)(chg 11/9/01). # iptables -A INPUT -i $IFACE -f -s $FISHER -j ACCEPT iptables -A INPUT -i $IFACE -f -j LOG --log-prefix "IPTABLES FRAGMENTS: " iptables -A INPUT -i $IFACE -f -j DROP #===================================================================== ## Anti-Spoofing # Accept Broadcast Packets from Samba iptables -A INPUT -i $IFACE -p udp -s $IPADDR -d $BROADCAST \ --dport 137:139 -j ACCEPT #======================================================================= ## Zope # Allow inbound iptables -A INPUT -i $IFACE -p tcp --dport 8080 -j ACCEPT iptables -A INPUT -i $IFACE -p tcp --dport 8021 -j ACCEPT #======================================================================= #================================================================== # FTP # Allow FTP Outbound iptables -A INPUT -i $IFACE -p tcp --sport 21 -m state --state \ ESTABLISHED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --dport 21 -m state --state \ NEW,ESTABLISHED -j ACCEPT # Active outbound FTP iptables -A INPUT -i $IFACE -p tcp --sport 20 -m state --state \ ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --dport 20 -m state --state \ ESTABLISHED -j ACCEPT # Passive inbound and outbound FTP iptables -A INPUT -i $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORTS \ -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --sport $UP_PORTS --dport $UP_PORTS \ -m state --state ESTABLISHED,RELATED -j ACCEPT # Allow inbound FTP iptables -A INPUT -i $IFACE -p tcp --dport 21 -m state --state \ NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --sport 21 -m state --state \ ESTABLISHED -j ACCEPT # Active inbound FTP iptables -A INPUT -i $IFACE -p tcp --dport 20 -m state --state \ ESTABLISHED -j ACCEPT iptables -A OUTPUT -o $IFACE -p tcp --sport 20 -m state --state \ ESTABLISHED,RELATED -j ACCEPT > > -------------------------------- > Jianping Zhu > Department of Computer Science > Univerity of Georgia > Athens, GA 30602 > Tel 706 5423900 > -------------------------------- > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

3 3

RE: [Zope] Variable sort, size in dtml-in
by Meilicke, Scott 19 Aug '02

19 Aug '02

Sorting by column is done within the zope management interface. Look at the code for examples. Scott -----Original Message----- From: Brian Sullivan [mailto:brians@meetingbywire.com] Sent: Monday, August 19, 2002 12:25 PM To: zope(a)zope.org Subject: [Zope] Variable sort, size in dtml-in I have been exploring using dtml-in to display selected items from a catalog. I would like to (from the page that is doing the displaying) be able to: 1) let the user change the sort order by using some sort of selection on the columns 2) let the user modify the "size" attribute 3) continue to retain the original "sequence-query" variable 4) have all displays ongoing reflect both the size, sorting changes and original "sequence-query" Does anybody have a dtml sample ( or a place to look) that does that or can give me a clue as to what strategy to use? _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

SQL: nested select
by Bryan C. Andregg 19 Aug '02

19 Aug '02

I'm trying to generate a SQL query that includes a nested select tag, something like select * from models where name = ( select name from users where uid = <dtml-sqlvar uid type=int ) I can do this easily by itself, but I'd like to be able to use this with some other optional parameters controled by a sqlgroup tag, select * from models <dtml-sqlgroup where> <dtml-sqltest foo type=nb optional> <dtml-and> <dtml-sqltest bar type=nb optional> <dtml-and> ... My Test Here ... </dtml-sqlgroup> How does one nest that select call in the DTML? Cheers, -- Bryan C. Andregg Duke University Medical Center Programmer Dept. of Anesthesiology e <bryan.andregg(a)duke.edu> p +1 919 684 6201

3 3

ZMySQLDA/Navigator startup error
by wayne＠wayneconnolly.com 19 Aug '02

19 Aug '02

When I start up Zope 2.5.1_ on freebsd I recieve the following unnerving errors. Can you please help me? Thanks in advance, Wayne ------ 2002-08-19T03:28:14 ERROR(200) Zope Could not import Products.ZMySQLDA Traceback (innermost last): File /usr/local/www/Zope/lib/python/OFS/Application.py, line 531, in import_product File /usr/local/www/Zope/lib/python/Products/ZMySQLDA/__init__.py, line 91, in ? File /usr/local/www/Zope/lib/python/Products/ZMySQLDA/DA.py, line 92, in ? File /usr/local/www/Zope/lib/python/Products/ZMySQLDA/db.py, line 89, in ? ImportError: No module named _mysql ------ 2002-08-19T03:28:14 PROBLEM(100) Init Ambiguous name for method of Products.ZNavigator.ZNavigator.ZNavigator: "manage" != "manage_main" ------ 2002-08-19T03:28:14 PROBLEM(100) Init Ambiguous name for method of Products.ZNavigator.ZNavigator.NavItem: "manage_main" != "manage"

2 1

aquiring objects upward in DTML
by Dan Jacobs 19 Aug '02

19 Aug '02

Hi, Is there an easy way within a DTML method to acquire a named object that may be anywhere upward. At the moment I'm looking at the parent by doing aq_parent['name'] but that only looks one level up. I tried aq_acquire('name') and aq_parent.aq_acquire('name') but they don't work. Thanks, Dan

4 5

rendering client object in dtml method
by Dave Peticolas 19 Aug '02

19 Aug '02

Hello, I am a Zope beginner and have a hopefully simple question. I want to use a dtml method to format the content of a dtml document which is the client object when the dtml method is called. For example, <http://dtml_doc/dtml_method> would, if I understand correctly, invoke dtml_method with dtml_doc as the client object. Given my understanding, I would think a statement such as the following in dtml_method ... <dtml-var this> ... would produce the rendered contents of dtml_doc appropriate for display, i.e., the contents you would get with <dtml-var dtml_doc>. However, said statement results in the rendered contents of dtml_doc with the html special characters escaped to display literally rather than be intepreted by the browser. How can I get the unescaped version of dtml_doc's rendered content? thanks, dave

2 1

sql_quote and missing text!
by Greg Conway 19 Aug '02

19 Aug '02

Hi all, Sorry, having a 'sorting out all those niggling little bits' afternoon.... :) When I insert text into a MySQL Database, I always end up with a scenario where users enter the ' and " character. I've read up, and found my_sql quote for dtml-vars, that should do the trick. BUT.... what seems to happen after a while, if several ' characters get entered, is that the text that has ended up between two ' characters disappears! Anybody know of anything I can do about this? many thanks! Regards, Greg Conway. This electronic transmission and any files attached to it are strictly confidential and intended solely for the addressee. If you are not the intended addressee, you must not disclose, copy or take any action in reliance of this transmission. If you have received this transmission in error, please notify us by return and delete the same. Further enquiries/returns can be posted to postmaster(a)gmlnt.com Thank you.

2 1

CopySupport for my objects
by Peter Bengtsson 19 Aug '02

19 Aug '02

I have a python product that is defined like this:: class IssueTrackerNotifyable(SimpleItem.SimpleItem, IssueTracker) and the class IssueTracker looks like this:: class IssueTracker(Folder.Folder, CatalogAware, Persistent ) The objects created with IssueTrackerNotifyable work fine as they are but I can't copy them and place them elsewhere. Not even in another IssueTracker class instance. What do I need to base-inherit to get complete CopySupport? --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.381 / Virus Database: 214 - Release Date: 2002-08-02

2 3

Variable sort, size in dtml-in
by Brian Sullivan 19 Aug '02

19 Aug '02

I have been exploring using dtml-in to display selected items from a catalog. I would like to (from the page that is doing the displaying) be able to: 1) let the user change the sort order by using some sort of selection on the columns 2) let the user modify the "size" attribute 3) continue to retain the original "sequence-query" variable 4) have all displays ongoing reflect both the size, sorting changes and original "sequence-query" Does anybody have a dtml sample ( or a place to look) that does that or can give me a clue as to what strategy to use?

1 0

how to ftp file to zope websever by ws-ftp
by Jianping Zhu 19 Aug '02

19 Aug '02

After open ws_ftp, I clicked connected, in the session property/advaced i set the remote port number to 8021.network timeout to 60. in session property/General I set host name to my linux sever name which the zope websever reside in, I put the root manager name of zope website in the field of UserID and password and cliked ok it gives info as following: connecting to 128.192.47.24:34864 200 port command successfully. LIST 150 opening ascii node data connection for the list !timer cancelled blocking call !accept error: blocking call cancelled !Retrieve of folder list failed (O) I failed to do ftp with ws_ftp. Any suggestions will be greatly appreciated!! Thanks -------------------------------- Jianping Zhu Department of Computer Science Univerity of Georgia Athens, GA 30602 Tel 706 5423900 --------------------------------

4 4