From: Brad M. <bmi...@gm...> - 2008-02-07 21:04:55
|
Hey Has anyone dealt much with kismet? Built from the latest oe recipe. I couldn't find any configure log, but when I configure it on a desktop I don't see any mention of rt2500. When I run the new package on gumstix, configured to use the rt2500 source type, I get: $ kismet Server options: none Client options: none Starting server... Waiting for server to start before starting UI... Will drop privs to bmidgley (501) gid 100 No specific sources given to be enabled, all will be enabled. Enabling channel hopping. Enabling channel splitting. FATAL: Support for capture source type 'rt2500' was not built. Check the output from 'configure' for more information about why it might not have been compiled in. -- Brad |
From: Yuvraj A. <yu...@uc...> - 2008-02-07 23:46:42
|
Hi All, I am having some issues with iptables with the new version (v1.3.8) in OE. Seems like on my buildroot system with an older version of iptables (v1.3.7) I was able to specify ports, which I am unable to do with the new version. ? Any ideas what I am doing wrong? Is there a way to force an older version of iptables (v1.3.7) on the OE build system? Thanks Yuvraj ******************************************************** OE (V176M) - Gives an error here root@gumstix-custom-connex:/somniloquy$ iptables --version iptables v1.3.8 root@gumstix-custom-connex:/somniloquy$ iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP iptables: No chain/target/match by that name root@gumstix-custom-connex:/somniloquy$ ********************************************* Buildroot (works here) [root@(none) ~]# iptables --version iptables v1.3.7 [root@(none) ~]# [root@(none) ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP [root@(none) ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP tcp -- anywhere anywhere tcp spt:1111 |
From: Yuvraj A. <yu...@uc...> - 2008-02-08 02:36:21
|
I figured out the issue - I need to install these following modules in addition to the standard iptables, x_tables modules. ipkg install kernel-module-xt-multiport ipkg install kernel-module-xt-tcpudp the above commands solve it for now, but Is there any way to configure these such that they are built as part of the standard image (at least my custom image?) thanks Yuvraj From: gum...@li... [mailto:gum...@li...] On Behalf Of Yuvraj Agarwal Sent: Thursday, February 07, 2008 3:47 PM To: 'General mailing list for gumstix users.' Subject: [Gumstix-users] OE - iptables issue Hi All, I am having some issues with iptables with the new version (v1.3.8) in OE. Seems like on my buildroot system with an older version of iptables (v1.3.7) I was able to specify ports, which I am unable to do with the new version. ? Any ideas what I am doing wrong? Is there a way to force an older version of iptables (v1.3.7) on the OE build system? Thanks Yuvraj ******************************************************** OE (V176M) - Gives an error here root@gumstix-custom-connex:/somniloquy$ iptables --version iptables v1.3.8 root@gumstix-custom-connex:/somniloquy$ iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP iptables: No chain/target/match by that name root@gumstix-custom-connex:/somniloquy$ ********************************************* Buildroot (works here) [root@(none) ~]# iptables --version iptables v1.3.7 [root@(none) ~]# [root@(none) ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP [root@(none) ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP tcp -- anywhere anywhere tcp spt:1111 |
From: Steve S. <sa...@gm...> - 2008-02-08 04:47:54
|
Yuvraj, If you look at the iptables recipe you'll see that it includes the line: RRECOMMENDS = "kernel-module-ip-tables kernel-module-iptable-filter" So for the standard OE iptables package just those two kernel modules will be installed along with the package. The right way to get additional modules installed would be to override the iptables recipe in your user.collection. Modify the line I pointed out to include the additional modules you need. If you feel that the base OE recipe is missing modules that are universally needed, lets discuss here on the list and I can add the override in com.gumstix.collection so everyone will benefit. Steve On Feb 7, 2008 6:36 PM, Yuvraj Agarwal <yu...@uc...> wrote: > > > > > I figured out the issue - I need to install these following modules in > addition to the standard iptables, x_tables modules. > > ipkg install kernel-module-xt-multiport > > ipkg install kernel-module-xt-tcpudp > > > the above commands solve it for now, but Is there any way to configure > these such > that they are built as part of the standard image (at least my custom > image?) > > thanks > > Yuvraj > > > > > > From: gum...@li... > [mailto:gum...@li...] On Behalf Of Yuvraj > Agarwal > Sent: Thursday, February 07, 2008 3:47 PM > To: 'General mailing list for gumstix users.' > Subject: [Gumstix-users] OE - iptables issue > > > > > > Hi All, > > I am having some issues with iptables with the new version (v1.3.8) in OE. > Seems like on my buildroot system with an older version of iptables > (v1.3.7) I was able > to specify ports, which I am unable to do with the new version… ? > Any ideas what I am doing wrong? Is there a way to force an older version > of iptables (v1.3.7) on the OE build system? > > Thanks > Yuvraj > > > > ******************************************************** > > OE (V176M) – Gives an error here > root@gumstix-custom-connex:/somniloquy$ iptables --version > > iptables v1.3.8 > > root@gumstix-custom-connex:/somniloquy$ iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp > --sport 1111 -j DROP > > iptables: No chain/target/match by that name > > root@gumstix-custom-connex:/somniloquy$ > > > > > > ********************************************* > Buildroot (works here) > [root@(none) ~]# iptables --version > > iptables v1.3.7 > > [root@(none) ~]# > > > > [root@(none) ~]# iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > > [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP > > > [root@(none) ~]# iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > DROP tcp -- anywhere anywhere tcp spt:1111 > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > gumstix-users mailing list > gum...@li... > https://lists.sourceforge.net/lists/listinfo/gumstix-users > > |
From: Yuvraj A. <yu...@uc...> - 2008-02-08 05:02:53
|
The right way to get additional modules installed would be to override the iptables recipe in your user.collection. Modify the line I pointed out to include the additional modules you need. >> How does that work ? Do I just copy the " iptables_1.3.8.bb" to my >> user.collection directory ? Do I create a new package there called >> iptables? Sorry - this part was slightly confusing :-P If you feel that the base OE recipe is missing modules that are universally needed, lets discuss here on the list and I can add the override in com.gumstix.collection so everyone will benefit. >> Well some modules like "kernel-module-xt-tcpudp" are especially useful >> because they let anyone set a filter/rules based on TCP/UDP ports. That module is >> essential according to me. I can let you know about others as I find the need to use them. Steve On Feb 7, 2008 6:36 PM, Yuvraj Agarwal <yu...@uc...> wrote: > > > > > I figured out the issue - I need to install these following modules in > addition to the standard iptables, x_tables modules. > > ipkg install kernel-module-xt-multiport > > ipkg install kernel-module-xt-tcpudp > > > the above commands solve it for now, but Is there any way to configure > these such > that they are built as part of the standard image (at least my custom > image?) > > thanks > > Yuvraj > > > > > > From: gum...@li... > [mailto:gum...@li...] On Behalf Of Yuvraj > Agarwal > Sent: Thursday, February 07, 2008 3:47 PM > To: 'General mailing list for gumstix users.' > Subject: [Gumstix-users] OE - iptables issue > > > > > > Hi All, > > I am having some issues with iptables with the new version (v1.3.8) in OE. > Seems like on my buildroot system with an older version of iptables > (v1.3.7) I was able > to specify ports, which I am unable to do with the new version. ? > Any ideas what I am doing wrong? Is there a way to force an older version > of iptables (v1.3.7) on the OE build system? > > Thanks > Yuvraj > > > > ******************************************************** > > OE (V176M) - Gives an error here > root@gumstix-custom-connex:/somniloquy$ iptables --version > > iptables v1.3.8 > > root@gumstix-custom-connex:/somniloquy$ iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp > --sport 1111 -j DROP > > iptables: No chain/target/match by that name > > root@gumstix-custom-connex:/somniloquy$ > > > > > > ********************************************* > Buildroot (works here) > [root@(none) ~]# iptables --version > > iptables v1.3.7 > > [root@(none) ~]# > > > > [root@(none) ~]# iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > > [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP > > > [root@(none) ~]# iptables -L > > Chain INPUT (policy ACCEPT) > > target prot opt source destination > > > > Chain FORWARD (policy ACCEPT) > > target prot opt source destination > > > > Chain OUTPUT (policy ACCEPT) > > target prot opt source destination > > DROP tcp -- anywhere anywhere tcp spt:1111 > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > gumstix-users mailing list > gum...@li... > https://lists.sourceforge.net/lists/listinfo/gumstix-users > > ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ gumstix-users mailing list gum...@li... https://lists.sourceforge.net/lists/listinfo/gumstix-users |
From: Steve S. <sa...@gm...> - 2008-02-08 05:17:06
|
Yuvraj, Just copy the entire iptables folder over to user.collection/packages. Then edit the .bb file as you like. When you bitbake -c rebuild iptables the recipe in user.collection will be used (recipes there have priority over both com.gumstix.collection and org.openembedded.snapshot) I'll keep watching for comments from you and others as to whether I should add additional modules to the standard iptables recipe. Steve On Feb 7, 2008 9:02 PM, Yuvraj Agarwal <yu...@uc...> wrote: > The right way to get additional modules installed would be to override > the iptables recipe in your user.collection. Modify the line I > pointed out to include the additional modules you need. > > >> How does that work ? Do I just copy the " iptables_1.3.8.bb" to my > >> user.collection directory ? Do I create a new package there called > >> iptables? Sorry - this part was slightly confusing :-P > > If you feel that the base OE recipe is missing modules that are > universally needed, lets discuss here on the list and I can add the > override in com.gumstix.collection so everyone will benefit. > > >> Well some modules like "kernel-module-xt-tcpudp" are especially useful > >> because they let anyone set a filter/rules based on TCP/UDP ports. That > module is > >> essential according to me. I can let you know about others as I find the > need to use them. > > > > Steve > > On Feb 7, 2008 6:36 PM, Yuvraj Agarwal <yu...@uc...> wrote: > > > > > > > > > > I figured out the issue - I need to install these following modules in > > addition to the standard iptables, x_tables modules. > > > > ipkg install kernel-module-xt-multiport > > > > ipkg install kernel-module-xt-tcpudp > > > > > > the above commands solve it for now, but Is there any way to configure > > these such > > that they are built as part of the standard image (at least my custom > > image?) > > > > thanks > > > > Yuvraj > > > > > > > > > > > > From: gum...@li... > > [mailto:gum...@li...] On Behalf Of Yuvraj > > Agarwal > > Sent: Thursday, February 07, 2008 3:47 PM > > To: 'General mailing list for gumstix users.' > > Subject: [Gumstix-users] OE - iptables issue > > > > > > > > > > > > Hi All, > > > > I am having some issues with iptables with the new version (v1.3.8) in > OE. > > Seems like on my buildroot system with an older version of iptables > > (v1.3.7) I was able > > to specify ports, which I am unable to do with the new version. ? > > Any ideas what I am doing wrong? Is there a way to force an older version > > of iptables (v1.3.7) on the OE build system? > > > > Thanks > > Yuvraj > > > > > > > > ******************************************************** > > > > OE (V176M) - Gives an error here > > root@gumstix-custom-connex:/somniloquy$ iptables --version > > > > iptables v1.3.8 > > > > root@gumstix-custom-connex:/somniloquy$ iptables -L > > > > Chain INPUT (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain FORWARD (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain OUTPUT (policy ACCEPT) > > > > target prot opt source destination > > > > root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp > > --sport 1111 -j DROP > > > > iptables: No chain/target/match by that name > > > > root@gumstix-custom-connex:/somniloquy$ > > > > > > > > > > > > ********************************************* > > Buildroot (works here) > > [root@(none) ~]# iptables --version > > > > iptables v1.3.7 > > > > [root@(none) ~]# > > > > > > > > [root@(none) ~]# iptables -L > > > > Chain INPUT (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain FORWARD (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain OUTPUT (policy ACCEPT) > > > > target prot opt source destination > > > > > > [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP > > > > > > [root@(none) ~]# iptables -L > > > > Chain INPUT (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain FORWARD (policy ACCEPT) > > > > target prot opt source destination > > > > > > > > Chain OUTPUT (policy ACCEPT) > > > > target prot opt source destination > > > > DROP tcp -- anywhere anywhere tcp spt:1111 > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by: Microsoft > > Defy all challenges. Microsoft(R) Visual Studio 2008. > > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > > _______________________________________________ > > gumstix-users mailing list > > gum...@li... > > https://lists.sourceforge.net/lists/listinfo/gumstix-users > > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > gumstix-users mailing list > gum...@li... > https://lists.sourceforge.net/lists/listinfo/gumstix-users > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > gumstix-users mailing list > gum...@li... > https://lists.sourceforge.net/lists/listinfo/gumstix-users > |