Re: [DNG] Which qemu version is shipped by default with devuan 3 ?

Lähettäjä: Mario Marietto
Päiväys:
Vastaanottaja: wirelessduck, Ralph Ronnquist
Kopio: dng
Aihe: Re: [DNG] Which qemu version is shipped by default with devuan 3 ?

Finally,after a lot of kernel recompilations,I've been able to issue all
the commands suggested some time ago by @Ralph Ronnquist without getting
errors :

# ip tuntap add tap0 mode tap
ok

# ip address add 10.0.2.1/24 dev tap0
ok

# sysctl net.ipv4.ip_forward=1
ok

# net.ipv4.ip_forward = 1
ok

# iptables -t nat -A POSTROUTING -o mlan0 -j MASQUERADE
ok

Now,the problem is that I don't see any tap0 interface :

# ifconfig

docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
       inet 172.17.0.1  netmask 255.255.0.0  broadcast 172.17.255.255
       ether 02:42:c9:04:eb:64  txqueuelen 0  (Ethernet)
       RX packets 0  bytes 0 (0.0 B)
       RX errors 0  dropped 0  overruns 0  frame 0
       TX packets 0  bytes 0 (0.0 B)
       TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
       inet 127.0.0.1  netmask 255.0.0.0
       inet6 ::1  prefixlen 128  scopeid 0x10<host>
       loop  txqueuelen 1000  (Local Loopback)
       RX packets 49  bytes 5414 (5.2 KiB)
       RX errors 0  dropped 0  overruns 0  frame 0
       TX packets 49  bytes 5414 (5.2 KiB)
       TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

mlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
       inet 192.168.1.6  netmask 255.255.255.0  broadcast 192.168.1.255
       inet6 fe80::a200:9c1a:7783:969f  prefixlen 64  scopeid 0x20<link>
       ether 60:21:c0:e9:44:63  txqueuelen 1000  (Ethernet)
       RX packets 264  bytes 31934 (31.1 KiB)
       RX errors 0  dropped 0  overruns 0  frame 0
       TX packets 237  bytes 33545 (32.7 KiB)
       TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Is this normal ?

On Thu, Aug 17, 2023 at 3:15 PM Mario Marietto <marietto2008@???>
wrote:

> Can someone help me,please,to understand how to fix it ?
>
> loziomario <https://www.reddit.com/user/loziomario/> :
>
> root@devuan:~# nft add table nat
>
> root@devuan:~# nft 'add chain nat postrouting { type nat hook postrouting
> priority 100 ; }'
>
> Error: Could not process rule: No such file or directory
>
> deeseearr <https://www.reddit.com/user/deeseearr/> :
>
> Your table has no family.
>
> You are also trying to add a chain to a table called "postrouting" in the
> "nat" family, which does not exist.
>
> All of your other rules are part of the "ip" family so this one should be
> roo.
>
> On Wed, Aug 16, 2023 at 9:33 PM Mario Marietto <marietto2008@???>
> wrote:
>
>> I've created a post on Reddit :
>>
>> https://www.reddit.com/r/devuan/comments/15swwij/neither_iptables_nor_nftable_are_working_for_me/
>>
>> where I tried to explain what my problem is. Unfortunately no one replied right now.
>>
>>
>> On Wed, Aug 16, 2023 at 7:13 PM Mario Marietto <marietto2008@???>
>> wrote:
>>
>>> They also suggest to check these kernel parameters :
>>>
>>> root@devuan:~# grep CONFIG_NF_TABLES_INET= /boot/config-`uname -r`
>>> CONFIG_NF_TABLES_INET=y
>>>
>>> root@devuan:~# grep CONFIG_NFT_COUNTER= /boot/config-`uname -r`
>>> CONFIG_NFT_COUNTER=y
>>>
>>> root@devuan:~# grep CONFIG_NFT_OBJREF= /boot/config-`uname -r`
>>> CONFIG_NFT_OBJREF=y
>>>
>>> but they seem correct,right ?
>>>
>>>
>>> On Wed, Aug 16, 2023 at 7:04 PM Mario Marietto <marietto2008@???>
>>> wrote:
>>>
>>>> Reading from here : https://unix.stackexchange.com/questions/537912/nftables-rule-no-such-file-or-directory-error
>>>>
>>>> I tried to do the following :
>>>>
>>>> root@devuan:~# nft add table ip filter
>>>>
>>>> root@devuan:~# nft add chain ip filter INPUT { type filter hook input priority 0 \; } # create chain >>>> root@devuan:~# nft add rule ip nat POSTROUTING oifname "mlan0" counter masquerade >>>> Error: Could not process rule: No such file or directory >>>> add rule ip nat POSTROUTING oifname mlan0 counter masquerade >>>> ^^^

>>>>
>>>> root@devuan:~# nft list ruleset >>>> table ip filter { >>>> chain INPUT { >>>> type filter hook input priority filter; policy accept; >>>> } >>>> }

>>>>
>>>>
>>>>
>>>> On Wed, Aug 16, 2023 at 6:58 PM Mario Marietto <marietto2008@???>
>>>> wrote:
>>>>
>>>>> root@devuan:~# iptables-translate -t nat -A POSTROUTING -o eth0 -j
>>>>> MASQUERADE
>>>>> nft add rule ip nat POSTROUTING oifname "eth0" counter masquerade
>>>>>
>>>>> root@devuan:~# ifconfig
>>>>>
>>>>> lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 >>>>> inet 127.0.0.1 netmask 255.0.0.0 >>>>> inet6 ::1 prefixlen 128 scopeid 0x10<host> >>>>> loop txqueuelen 1000 (Local Loopback) >>>>> RX packets 28 bytes 3449 (3.3 KiB) >>>>> RX errors 0 dropped 0 overruns 0 frame 0 >>>>> TX packets 28 bytes 3449 (3.3 KiB) >>>>> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

>>>>>
>>>>> mlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 >>>>> inet 192.168.1.6 netmask 255.255.255.0 broadcast >>>>> 192.168.1.255 >>>>> inet6 fe80::47b1:6a1e:c9a8:5e73 prefixlen 64 scopeid >>>>> 0x20<link> >>>>> ether 50:22:c1:e9:44:63 txqueuelen 1000 (Ethernet) >>>>> RX packets 656 bytes 59350 (57.9 KiB) >>>>> RX errors 0 dropped 0 overruns 0 frame 0 >>>>> TX packets 351 bytes 35970 (35.1 KiB) >>>>> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

>>>>>
>>>>> root@devuan:~# nft add rule ip nat POSTROUTING oifname "mlan0"
>>>>> counter masquerade
>>>>>
>>>>> Error: Could not process rule: No such file or directory >>>>> add rule ip nat POSTROUTING oifname mlan0 counter masquerade >>>>> ^^^

>>>>>
>>>>>
>>>>>
>>>>> On Wed, Aug 16, 2023 at 1:03 PM wirelessduck--- via Dng <
>>>>> dng@???> wrote:
>>>>>
>>>>>>
>>>>>>
>>>>>> > On 16 Aug 2023, at 20:13, Mario Marietto <marietto2008@???>
>>>>>> wrote:
>>>>>> >
>>>>>> >
>>>>>> > It's too much out of my knowledge. I'm not able to understand
>>>>>> what's the correct syntax to use.
>>>>>>
>>>>>> The manpage for iptables-translate says it takes the same arguments
>>>>>> as iptables. You can try:
>>>>>>
>>>>>> iptables-translate -t nat -A POSTROUTING -o eth0 -j MASQUERADE
>>>>>>
>>>>>> and that should output the equivalent nftables command. I don’t have
>>>>>> a terminal here to try that myself right now.
>>>>>>
>>>>>> Tom
>>>>>> _______________________________________________
>>>>>> Dng mailing list
>>>>>> Dng@???
>>>>>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Mario.
>>>>>
>>>>
>>>>
>>>> --
>>>> Mario.
>>>>
>>>
>>>
>>> --
>>> Mario.
>>>
>>
>>
>> --
>> Mario.
>>
>
>
> --
> Mario.
>

--
Mario.

Donate to Dyne.org