Jump to content


Photo

Iptables on Openpli


  • Please log in to reply
53 replies to this topic

Re: Iptables on Openpli #21 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 26 February 2016 - 21:32

OK, i changed the feed paths to openpli because i don`t have my own feed.

 

I have to setup a webserver and setup my own feed.

 

I would like to install only iptables from my feed and than change back to openpli feed. Could this be a problem?


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #22 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 26 February 2016 - 21:35

I can also move the feed to my local stb hdd and change the paths to the local hdd. I will try this first.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #23 athoik

  • PLi® Core member
  • 8,458 posts

+327
Excellent

Posted 26 February 2016 - 22:05

Yes that works ;)

Here is an example when I had xpeedc feeds on usb stick...

src openpli-xpeedc file:///media/usb/build/tmp/deploy/ipk/xpeedc

Wavefield T90: 0.8W - 1.9E - 4.8E - 13E - 16E - 19.2E - 23.5E - 26E - 33E - 39E - 42E - 45E on EMP Centauri DiseqC 16/1
Unamed: 13E Quattro - 9E Quattro on IKUSI MS-0916

Re: Iptables on Openpli #24 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 26 February 2016 - 23:07

feed works but there is a new problem.

...
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * opkg_install_cmd: Cannot install package iptables.

i can`t install iptables. :(


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #25 athoik

  • PLi® Core member
  • 8,458 posts

+327
Excellent

Posted 26 February 2016 - 23:11

Can you show how you have changed the feeds to point in local media?
Wavefield T90: 0.8W - 1.9E - 4.8E - 13E - 16E - 19.2E - 23.5E - 26E - 33E - 39E - 42E - 45E on EMP Centauri DiseqC 16/1
Unamed: 13E Quattro - 9E Quattro on IKUSI MS-0916

Re: Iptables on Openpli #26 betacentauri

  • PLi® Core member
  • 7,185 posts

+323
Excellent

Posted 27 February 2016 - 00:33

You can also copy the needed ipks from your build to your box and install them there manually via "opkg install <path to file>".


Xtrend ET-9200, ET-8000, ET-10000, OpenPliPC on Ubuntu 12.04

Re: Iptables on Openpli #27 Erik Slagter

  • PLi® Core member
  • 46,969 posts

+542
Excellent

Posted 27 February 2016 - 17:38

feed works but there is a new problem.

...
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * parse_from_stream_nomalloc: Missing new line character at end of file!
 * opkg_install_cmd: Cannot install package iptables.

i can`t install iptables. :(

This is a familiar problem. I don't know what it is caused by, but what helps is to change src/gz into src in the feeds files. And then probably clear the opkg tmp directory.


* Wavefrontier T90 with 28E/23E/19E/13E via SCR switches 2 x 2 x 6 user bands
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.


Re: Iptables on Openpli #28 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 27 February 2016 - 21:58

I have now removed the /gz in the feed config files.

src openpli-all file://media/hdd/ipk/all
#src/gz openpli-all http://downloads.pli-images.org/feeds/openpli-4/all
src openpli-mips32el file://media/hdd/ipk/mips32el
#src/gz openpli-mips32el http://downloads.pli-images.org/feeds/openpli-4/mips32el
src openpli-vusolo2 file://media/hdd/ipk/vusolo2
#src/gz openpli-vusolo2 http://downloads.pli-images.org/feeds/openpli-4/vusolo2

opkg can not find iptables.

root@vusolo2:~# opkg update
Downloading http://downloads.pli-images.org/feeds/openpli-4/3rd-party/Packages.gz.
Updated list of available packages in /var/lib/opkg/openpli-3rd-party.
Downloading http://downloads.pli-images.org/feeds/openpli-4/3rd-party-vusolo2/Packages.gz.
Updated list of available packages in /var/lib/opkg/openpli-3rd-party-vusolo2.
Downloading file://media/hdd/ipk/all/Packages.
Updated list of available packages in /var/lib/opkg/openpli-all.
Downloading file://media/hdd/ipk/mips32el/Packages.
Updated list of available packages in /var/lib/opkg/openpli-mips32el.
Downloading file://media/hdd/ipk/vusolo2/Packages.
Updated list of available packages in /var/lib/opkg/openpli-vusolo2.
root@vusolo2:~# opkg install iptables
Unknown package 'iptables'.
Collected errors:
 * opkg_install_cmd: Cannot install package iptables.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #29 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 28 February 2016 - 20:48

Manual installation works but there are still some modules missing.

root@vusolo2:~# cd /media/hdd/ipk/mips32el
root@vusolo2:/media/hdd/ipk/mips32el# opkg install iptables_1.4.21-r0_mips32el.ipk
Installing iptables (1.4.21-r0) on root.
iptables: unsatisfied recommendation for kernel-module-nf-defrag-ipv4
iptables: unsatisfied recommendation for kernel-module-nf-conntrack
iptables: unsatisfied recommendation for kernel-module-ipt-masquerade
iptables: unsatisfied recommendation for kernel-module-nf-nat
iptables: unsatisfied recommendation for kernel-module-nf-conntrack-ipv4
iptables: unsatisfied recommendation for kernel-module-iptable-nat
Installing kernel-module-x-tables (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-x-tables_3.13.5-r2.4.4_vusolo2.ipk.
Installing kernel-module-ip-tables (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-ip-tables_3.13.5-r2.4.4_vusolo2.ipk.
Installing kernel-module-iptable-filter (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-iptable-filter_3.13.5-r2.4.4_vusolo2.ipk.
Configuring kernel-module-x-tables.
Configuring kernel-module-ip-tables.
Configuring kernel-module-iptable-filter.
Configuring iptables.

I will try to build a new image. Hopefully i will find all missing modules.

 

If that works, can i change the feed config paths back openpli? Or is it better to keep the local feed on my hdd?


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #30 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 28 February 2016 - 21:25

It seems that i dont need to build again.

 

My rules has been accepted in the command line.

Seems that the following modules are enough:

kernel-module-x-tables.
kernel-module-ip-tables.
kernel-module-iptable-filter

I changed die feed config paths to openpli because the packages in the local feed can not be found by opkg. But i think it was a bad idea because my kernel has been updated now.

root@vusolo2:~# opkg install openvpn
Installing openvpn (2.3.2-r0.0) on root.
Downloading http://downloads.pli-images.org/feeds/openpli-4/mips32el/openvpn_2.3.2-r0.0_mips32el.ipk.
Installing liblzo2-2 (2.08-r0.0) on root.
Downloading http://downloads.pli-images.org/feeds/openpli-4/mips32el/liblzo2-2_2.08-r0.0_mips32el.ipk.
Installing kernel-module-tun (3.13.5-r2.4.4.8) on root.
Downloading http://downloads.pli-images.org/feeds/openpli-4/vusolo2/kernel-module-tun_3.13.5-r2.4.4.8_vusolo2.ipk.
Upgrading kernel-3.13.5 from 3.13.5-r2.4.4 to 3.13.5-r2.4.4.8 on root.
Downloading http://downloads.pli-images.org/feeds/openpli-4/vusolo2/kernel-3.13.5_3.13.5-r2.4.4.8_vusolo2.ipk.
Upgrading kernel-image-3.13.5 from 3.13.5-r2.4.4 to 3.13.5-r2.4.4.8 on root.
Downloading http://downloads.pli-images.org/feeds/openpli-4/vusolo2/kernel-image-3.13.5_3.13.5-r2.4.4.8_vusolo2.ipk.
Configuring kernel-image-3.13.5.
Erasing 128 Kibyte @ 200000 - 28% complete.
Skipping bad block at 0x00220000
Erasing 128 Kibyte @ 700000 - 100% complete.
Writing at 0x00000000
Writing at 0x00020000
Writing at 0x00040000
Writing at 0x00060000
Writing at 0x00080000
Writing at 0x000a0000
Writing at 0x000c0000
Writing at 0x000e0000
Writing at 0x00100000
Writing at 0x00120000
Writing at 0x00140000
Writing at 0x00160000
Writing at 0x00180000
Writing at 0x001a0000
Writing at 0x001c0000
Writing at 0x001e0000
Writing at 0x00200000
Skipping bad block at 0x00220000
Writing at 0x00240000
Writing at 0x00260000
Writing at 0x00280000
Writing at 0x002a0000
Writing at 0x002c0000
Writing at 0x002e0000
Writing at 0x00300000
Writing at 0x00320000
Writing at 0x00340000
Writing at 0x00360000
Writing at 0x00380000
Writing at 0x003a0000
Writing at 0x003c0000
Writing at 0x003e0000
Writing at 0x00400000
Configuring kernel-3.13.5.
Configuring liblzo2-2.
Configuring kernel-module-tun.
Configuring openvpn.

What can be the reason for the problem with the local feed?

root@vusolo2:~# opkg install openvpn
Unknown package 'openvpn'.
Collected errors:
 * opkg_install_cmd: Cannot install package openvpn.

The config is in Post 28.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #31 betacentauri

  • PLi® Core member
  • 7,185 posts

+323
Excellent

Posted 28 February 2016 - 21:52

As said why don't you copy the needed ipks to your box and install them manually?

I guess at first you want to test whether it really works. Later you can try to setup the feed.


Xtrend ET-9200, ET-8000, ET-10000, OpenPliPC on Ubuntu 12.04

Re: Iptables on Openpli #32 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 29 February 2016 - 21:48

I did so and it works. You can see it in Post 29.

 

I just wanted to install openvpn after the successful installation of iptables but it failed. A manual installation should work.

 

What i don't understand is why opkg cant find packages on my local feed.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #33 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 29 February 2016 - 22:48

Ok, it seems that there is still one or more kernel-modules are missing.

root@vusolo2:~# iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
iptables: No chain/target/match by that name.

The problem is that i cant find all needed modules in the config tool.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #34 Erik Slagter

  • PLi® Core member
  • 46,969 posts

+542
Excellent

Posted 1 March 2016 - 19:20

I did not say "remote the whole line", I said "remove the /gz".


* Wavefrontier T90 with 28E/23E/19E/13E via SCR switches 2 x 2 x 6 user bands
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.


Re: Iptables on Openpli #35 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 1 March 2016 - 21:42

I did so like posted in post 28.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #36 athoik

  • PLi® Core member
  • 8,458 posts

+327
Excellent

Posted 1 March 2016 - 21:57

Did you build openvpn? Just compiling image with MACHINE=xxx make image will build the bare minimum. You need to build feeds or openvpn separately.

Edited by athoik, 1 March 2016 - 21:57.

Wavefield T90: 0.8W - 1.9E - 4.8E - 13E - 16E - 19.2E - 23.5E - 26E - 33E - 39E - 42E - 45E on EMP Centauri DiseqC 16/1
Unamed: 13E Quattro - 9E Quattro on IKUSI MS-0916

Re: Iptables on Openpli #37 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 1 March 2016 - 22:06

I have build the feed.

MACHINE=vusolo2 bitbake openpli-enigma2-feed

Then copied the whole ipk folder to my vusolo2 hdd.

 

Last night i build a new image + feed. There are more kernel-modules activated. I will test it in the next hour.

 

But i think there is still something missing because i can not find all required kernel-modules in the config tool. If the needed modules are not in the source thay can not be found and activated.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #38 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 1 March 2016 - 22:35

The test with the new build was not successful.

root@vusolo2:/media/hdd/ipk/mips32el# opkg install iptables
Installing iptables (1.4.21-r0) on root.
Downloading file://media/hdd/ipk/mips32el/iptables_1.4.21-r0_mips32el.ipk.
iptables: unsatisfied recommendation for kernel-module-nf-defrag-ipv4
iptables: unsatisfied recommendation for kernel-module-nf-conntrack
iptables: unsatisfied recommendation for kernel-module-ipt-masquerade
iptables: unsatisfied recommendation for kernel-module-nf-nat
iptables: unsatisfied recommendation for kernel-module-nf-conntrack-ipv4
iptables: unsatisfied recommendation for kernel-module-iptable-nat
Installing kernel-module-x-tables (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-x-tables_3.13.5-r2.4.4_vusolo2.ipk.
Installing kernel-module-ip-tables (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-ip-tables_3.13.5-r2.4.4_vusolo2.ipk.
Installing kernel-module-iptable-filter (3.13.5-r2.4.4) on root.
Downloading file://media/hdd/ipk/vusolo2/kernel-module-iptable-filter_3.13.5-r2.4.4_vusolo2.ipk.
Configuring kernel-module-x-tables.
Configuring kernel-module-ip-tables.
Configuring kernel-module-iptable-filter.
Configuring iptables.
root@vusolo2:/media/hdd/ipk/mips32el# iptables -P INPUT ACCEPT
root@vusolo2:/media/hdd/ipk/mips32el# iptables -F
root@vusolo2:/media/hdd/ipk/mips32el# iptables -A INPUT -i lo -j ACCEPT
root@vusolo2:/media/hdd/ipk/mips32el# iptables -A INPUT -i eth0 -j ACCEPT
root@vusolo2:/media/hdd/ipk/mips32el# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: No chain/target/match by that name.
root@vusolo2:/media/hdd/ipk/mips32el# iptables -A INPUT -i eth0 -p tcp --dport 21 -j ACCEPT
iptables: No chain/target/match by that name.
root@vusolo2:~#

There is still something missing.


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero


Re: Iptables on Openpli #39 WanWizard

  • PLi® Core member
  • 70,562 posts

+1,815
Excellent

Posted 1 March 2016 - 22:42

What does this give you?

iptables -L

 
and

lsmod|grep tables

Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: Iptables on Openpli #40 Ivan

  • Senior Member
  • 68 posts

+1
Neutral

Posted 1 March 2016 - 22:48

I found the attachment function. :)

Can someone delete my last post?

Attached Files


TechniSat Multytenne Twin: 19,2°E | 13,0°E | 23,5°E | 28,2°E -> OpenPLi4.0@vusolo2
Multifeed Offset: 19,2°E | 13,0°E | 4,8°E | 5,0°W  -> OpenPLi4.0@dm800se + OpenPLi4.0@vuzero



10 user(s) are reading this topic

0 members, 10 guests, 0 anonymous users