Re: [Gumstix-users] OE - iptables issue

[Steve S. <sa...@gm...>]

Yuvraj,

Just copy the entire iptables folder over to user.collection/packages.
 Then edit the .bb file as you like.  When you bitbake -c rebuild
iptables the recipe in user.collection will be used (recipes there
have priority over both com.gumstix.collection and
org.openembedded.snapshot)

I'll keep watching for comments from you and others as to whether I
should add additional modules to the standard iptables recipe.

Steve

On Feb 7, 2008 9:02 PM, Yuvraj Agarwal <yu...@uc...> wrote:
> The right way to get additional modules installed would be to override
> the iptables recipe in your user.collection.  Modify the line I
> pointed out to include the additional modules you need.
>
> >> How does that work ? Do I just copy the " iptables_1.3.8.bb" to my
> >> user.collection directory ? Do I create a new package there called
> >> iptables? Sorry - this part was slightly confusing :-P
>
> If you feel that the base OE recipe is missing modules that are
> universally needed, lets discuss here on the list and I can add the
> override in com.gumstix.collection so everyone will benefit.
>
> >> Well some modules like "kernel-module-xt-tcpudp" are especially useful
> >> because they let anyone set a filter/rules based on TCP/UDP ports. That
> module is
> >> essential according to me. I can let you know about others as I find the
> need to use them.
>
>
>
> Steve
>
> On Feb 7, 2008 6:36 PM, Yuvraj Agarwal <yu...@uc...> wrote:
> >
> >
> >
> >
> > I figured out the issue - I need to install these following modules in
> > addition to the standard iptables, x_tables modules.
> >
> >  ipkg install kernel-module-xt-multiport
> >
> > ipkg install kernel-module-xt-tcpudp
> >
> >
> >  the above commands solve it for now, but Is there any way to configure
> > these such
> >  that they are built as part of the standard image (at least my custom
> > image?)
> >
> >  thanks
> >
> > Yuvraj
> >
> >
> >
> >
> >
> > From: gum...@li...
> > [mailto:gum...@li...] On Behalf Of Yuvraj
> > Agarwal
> >  Sent: Thursday, February 07, 2008 3:47 PM
> >  To: 'General mailing list for gumstix users.'
> >  Subject: [Gumstix-users] OE - iptables issue
> >
> >
> >
> >
> >
> > Hi All,
> >
> >  I am having some issues with iptables with the new version (v1.3.8) in
> OE.
> >  Seems like on my buildroot system with an older version of iptables
> > (v1.3.7) I was able
> >  to specify ports, which I am  unable to do with the new version. ?
> >  Any ideas what I am doing wrong? Is there a way to force an older version
> >  of iptables (v1.3.7) on the OE build system?
> >
> > Thanks
> >  Yuvraj
> >
> >
> >
> > ********************************************************
> >
> > OE (V176M) - Gives an error here
> >  root@gumstix-custom-connex:/somniloquy$ iptables --version
> >
> > iptables v1.3.8
> >
> > root@gumstix-custom-connex:/somniloquy$ iptables -L
> >
> > Chain INPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain FORWARD (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain OUTPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> > root@gumstix-custom-connex:/somniloquy$ iptables -A OUTPUT --protocol tcp
> > --sport 1111 -j DROP
> >
> > iptables: No chain/target/match by that name
> >
> > root@gumstix-custom-connex:/somniloquy$
> >
> >
> >
> >
> >
> > *********************************************
> >  Buildroot (works here)
> >  [root@(none) ~]# iptables --version
> >
> > iptables v1.3.7
> >
> > [root@(none) ~]#
> >
> >
> >
> > [root@(none) ~]# iptables -L
> >
> > Chain INPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain FORWARD (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain OUTPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >  [root@(none) ~]# iptables -A OUTPUT --protocol tcp --sport 1111 -j DROP
> >
> >
> >  [root@(none) ~]# iptables -L
> >
> > Chain INPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain FORWARD (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> >
> >
> > Chain OUTPUT (policy ACCEPT)
> >
> > target     prot opt source               destination
> >
> > DROP       tcp  --  anywhere             anywhere            tcp spt:1111
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Microsoft
> > Defy all challenges. Microsoft(R) Visual Studio 2008.
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > _______________________________________________
> > gumstix-users mailing list
> > gum...@li...
> > https://lists.sourceforge.net/lists/listinfo/gumstix-users
> >
> >
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> gumstix-users mailing list
> gum...@li...
> https://lists.sourceforge.net/lists/listinfo/gumstix-users
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> gumstix-users mailing list
> gum...@li...
> https://lists.sourceforge.net/lists/listinfo/gumstix-users
>