BalaBit blog

GUARDING YOUR BUSINESS

Howto install Zorp 3.9.2 on Debian Squeeze 64 bit

Monday, January 30, 2012 @ 03:01 PM Author: Gábor Sipos

This will guide you through the installation of the latest stable version of Zorp GPL (currently version 3.9.2) and get it to work with minimal configuration. This guide should work for most current Ubuntu Linux (as well as Debian Squeeze) distributions but may differ on some parts.

The sort way to download the zorpgpl-install-squeezefile, then extract zorp.sh script

[codesyntax lang="php"]

tar xvf zorpgpl-install-squeeze.tgz zorp.sh

[/codesyntax]

then run it

[codesyntax lang="php"]

./zorp.sh

[/codesyntax]

The detailed steps from the script see below:

Install required packages For Zorp GPL 3.9.2 compilation

First we update our package database, then we install all needed Debian packages: [codesyntax lang="php"]

apt-get update
apt-get -y install git-core python2.6-dev gperf python-dns python-support dpkg-dev debhelper libssl-dev libglib2.0-dev libcap-dev zlib1g-dev python-openssl python-dev

[/codesyntax]

Install the kzorp

To get really working Zorp you need kzorp in the linux kernel. Let’s install:

[codesyntax lang="php"]

wget http://www.balabit.com/downloads/files?path=/kzorp/binaries/20110804/linux-image-2.6.32_kzorp.1.2_amd64.deb -O - > linux-image-2.6.32_kzorp.1.2_amd64.deb
dpkg -i linux-image-2.6.32_kzorp.1.2_amd64.deb

[/codesyntax]

Download and build the Zorp GPL libraries

[codesyntax lang="php"]

mkdir -p /etc/zorp
wget -O /usr/src/libzorpll_3.9.1.0.tar.gz http://www.balabit.com/downloads/files?path=/zorp/3.9.2/source/libzorpll_3.9.1.0.tar.gz tar xzf /usr/src/libzorpll_3.9.1.0.tar.gz -C /usr/src/ cd /usr/src/dist-libzorpll/ dpkg-buildpackage -b dpkg -i /usr/src/libzorpll3.9-1_3.9.1.0_amd64.deb /usr/src/libzorpll-dev_3.9.1.0_amd64.deb

[/codesyntax]

Download and build the Zorp GPL

[codesyntax lang="php"]

wget -O /usr/src/zorp_3.9.2.tar.gz http://www.balabit.com/downloads/files?path=/zorp/3.9.2/source/zorp_3.9.2.tar.gz tar xzf /usr/src/zorp_3.9.2.tar.gz -C /usr/src/
cd /usr/src/zorp-3.9.2/
dpkg-buildpackage -b

[/codesyntax]

Install the Zorp GPL package

[codesyntax lang="php"]

dpkg -i /usr/src/*.deb

[/codesyntax]

Copy a minimal config for Zorp GPL

[codesyntax lang="php"]

tar xvf $pwd/zorpgpl-install-squeeze.tgz -C /etc/zorp/ policy.py instances.conf zorpctl.conf

[/codesyntax]

This minimal config need for start Zorp successfully without errors.

Start the Zorp GPL instances

[codesyntax lang="php"]

zorpctl start

[/codesyntax]

Verify running Zorp instances

[codesyntax lang="php"]

zorpctl status
[/codesyntax]
You see the running Zorp instances per row (Only one instance with minimal config). Example:
[codesyntax lang="php"]
Instance inter: running, 4 threads active, pid 5735
[/codesyntax]

You can verify the Zorp GPL version with zorpctl command:

[codesyntax lang="php"]

zorpctl version

[/codesyntax]

And verify the Zorp log in the messages file:
[codesyntax lang="php"]

tail -f /var/log/messages

[/codesyntax]